Both Apple and Android saw increasing instances of detected vulnerabilities.
- A 138% increase in critical Android vulnerabilities was discovered in 2022, while Apple iOS accounted for 80% of the zero-day vulnerabilities actively exploited in the wild.
- Improper cloud storage configurations in mobile apps are a leading attack surface. ±2% of all iOS and ±10% of all Android mobile apps accessed insecure cloud instances.
The Year of Mobile Security
The Zimperium 2023 Global Mobile Threat Report examines the trends that shaped the mobile security landscape over the last year and analyzes research from Zimperium’s zLabs team, as well as third-party industry data, partner insights, and observations from leading industry experts.
2,000
malware samples detected by Zimperium each week last year that had not been identified by the industry
80%
of phishing attacks targeted mobile devices, or were designed to function on both mobile devices and desktops
51%
increase in the total number of unique mobile malware samples detected by Zimperium year-over-year
43%
of all compromised devices were fully exploited, not jailbroken or rooted – an increase of 187% YOY
80%
of the zero day mobile vulnerabilities actively being exploited in the past year were for iOS
14%
of mobile apps using cloud storage were vulnerable due to unsecured configurations
138%
year-over-year increase in critical Android vulnerabilities discovered
6 – 10
times users are more likely to fall for an SMS phishing attack than an email-based attack
- The rapid growth in Mobile Devices and app usage has created an ever-growing attack surface and risks in organizations.
According to last year’s report, 60% of endpoints accessing company assets were mobile devices.
Mobile-powered firms must strengthen mobile security procedures to secure employee’s personal data and critical organizational information.”
Improper configurations and minimal user awareness of phishing and smishing create devices prone to high-security risks.
Zimperium, a mobile security platform for mobile devices and apps, has released its highly anticipated Global Mobile Threat Report 2023.
Mobile Threat Report Key Findings:
As per the Global threat report of 2023 is that 43% of all compromised devices were fully exploited, an increase of 187% year-over-year.
Phishing attacks on mobile devices are becoming more prevalent. 80% of phishing sites are designed to run on both desktop and mobile platforms.
Meanwhile, SMS phishing or smishing attacks are six to ten times more likely to be successful than email-based attacks.
From their anti-phishing technology, they have found an average of four malicious/phishing links clicked from every device
EMEA and North America have the greatest percentage of infected devices, with EMEA at 35% and North America at 25%, respectively.
Both Apple and Android saw increasing instances of detected vulnerabilities.
A 138% increase in critical Android vulnerabilities was discovered in 2022, while Apple iOS accounted for 80% of the zero-day vulnerabilities actively exploited in the wild.
Improper cloud storage configurations in mobile apps are a leading attack surface. ±2% of all iOS and ±10% of all Android mobile apps accessed insecure cloud instances.
In order to succeed, businesses need to adopt a mobile-first security strategy, in which risk is continuously prioritized and assessed as close to the user and device as feasible, and where the vulnerability posture is baselined and assessed regularly so that operations may take place in a known state with full visibility.
They need to take prompt action in the areas of risk identification and mitigation, including the use of zero trust and conditional access workflows, XDR, and autonomous third-party integrations, as well as the assessment and maintenance of knowledge regarding global privacy rules.
“This should be a wake-up call for enterprises to increase focus and investment in mobile security tools and practices.”
New Research Reveals 187% Increase in Sophisticated Attacks Against Mobile Devices
The rapid growth in Mobile Devices and app usage has created an ever-growing attack surface and risks in organizations.
According to last year’s report, 60% of endpoints accessing company assets were mobile devices.
According to last year’s report, 60% of endpoints accessing company assets were mobile devices.
.jfif)
No comments:
Post a Comment