Rethinking Mobile App Security | Guardsquare

Most mobile security incidents aren’t caused by sophisticated zero-days. They’re caused by ordinary mistakes that made it through code review because they don’t look dangerous in context. That might look like a key pasted into a config file during a sprint, a certificate check that only covers half the app’s network calls, or an activity left exported because removing the flag might break something else.