x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Upwardly Mobile - API & App Security News

Approov Mobile Security

Think the App Store’s built-in security is enough? Think again.Welcome to Upwardly Mobile, the podcast that exposes the gaps in iOS, Android, and HarmonyOS security. Hosts Skye and George take you into the high-stakes world of mobile defense, revealing why standard protections from Apple, Google, and Samsung often leave your sensitive data exposed. Sponsored by Approov—the gold standard in mobile app attestation—we move beyond the basics to tackle weaponized AI threats and dynamic API attacks. From

technology tech news

All Episodes

8:14

Apple's DMA Non-Compliance: An Open Letter

Upwardly Mobile - API & App Security News ·

2025/12/15

Apple's DMA Non-Compliance: An Open LetterIn this episode of *Upwardly Mobile*, we break down the seismic shift in the mobile app landscape following the European Commission’s decision to formally fine Apple €500 million for breaching the Digital Markets Act (DMA). We explore why regulators view Apple’s recent changes not as genuine adherence to the law, but as "malicious compliance"—a deliberate attempt to technically meet requirements while maintaining control and fees.We also discuss the December

en

12:58

Chinese Hackers & the React2Shell Crisis

Upwardly Mobile - API & App Security News ·

2025/12/08

Chinese Hackers & the React2Shell CrisisThis week, we dive deep into the critical, maximum-severity security flaw known as React2Shell (tracked as CVE-2025-55182). This vulnerability, which impacts React, the widely-used open-source JavaScript library, allows for unauthenticated remote code execution (RCE) through specially crafted HTTP requests on affected servers. The episode explores the immediate aftermath of the disclosure. Exploitation attempts began quickly, with Amazon Web Services (AWS)

en

11:00

Sanchar Saathi |The Mobile App Triggering India's...

Upwardly Mobile - API & App Security News ·

2025/12/02

Sanchar Saathi: The Mandatory Cyber Safety App Triggering India's Surveillance FirestormIn this critical episode of "Upwardly Mobile," we dive into the escalating controversy surrounding India's Sanchar Saathi app, a government-mandated digital tool that is fueling a nationwide debate over state surveillance and digital privacy. Designed as a citizen-centric safety tool to combat telecom fraud and track lost or stolen devices using their unique IMEI, the app has been lauded by the government for its

en

10:51

Supply Chain Security Unpacked: Combating Dependency...

Upwardly Mobile - API & App Security News ·

2025/11/27

Supply Chain Security Unpacked: Combating Dependency Confusion, Poisoned PipelinesEpisode Notes: The software supply chain, the "backbone of modern software development," is under unprecedented assault, with attacks aimed at libraries and development tools soaring by an astounding 633% year-over-year. This episode explores the evolution of supply chain threats, examining everything from software vulnerabilities and malicious maintainers to hidden risks lurking in hardware and commercial binaries,

en

10:04

How Aisura 'Turbo Mirai' Botnet Reshaped Mobile DDoS...

Upwardly Mobile - API & App Security News ·

2025/11/24

The Multi-Terabit Battlefield: How Aisura 'Turbo Mirai' Botnet Reshaped Mobile DDoS WarfareOn November 18, 2025, a massive Cloudflare service interruption took down major platforms worldwide, including X, ChatGPT, Shopify, and various critical transit services. Given the intense, ongoing cyber conflict, initial speculation immediately pointed toward a successful, hyper-volumetric Distributed Denial-of-Service (DDoS) attack. Cloudflare has recently been at the forefront of blocking unprecedented

en

12:47

Black Friday's Hidden Threat: Stopping AI-Powered...

Upwardly Mobile - API & App Security News ·

2025/11/21

Black Friday's Hidden Threat: Stopping AI-Powered Fraud and Mobile Commerce Exploits The biggest shopping days of the year—Black Friday and Cyber Monday—have also become the prime hunting grounds for cybercriminals, with global financial losses from attacks predicted to hit $10 billion in 2024. In this episode, we dive deep into the rising statistics shaping financial cybersecurity during the holiday shopping season, focusing on how sophisticated, AI-driven scams and mobile app vulnerabilities are

en

8:50

X Joins App Fairness Coalition to Combat Monopolies

Upwardly Mobile - API & App Security News ·

2025/11/17

In this pivotal episode of Upwardly Mobile, we dive into the significance of X (formerly known as Twitter) joining the Coalition for App Fairness (CAF). This move signals growing momentum in the global effort to reform the mobile app ecosystem, currently dominated by Apple and Google, whose practices are alleged to harm consumers and developers alike. We examine X's commitment to dismantling monopolistic practices and fostering a digital future where competition thrives and innovation is rewarded

en

9:06

Standing Up to Extortion: Lessons from the...

Upwardly Mobile - API & App Security News ·

2025/11/15

Standing Up to Extortion: Lessons from the Checkout.com Breach and the Rise of Vishing Attacks DescriptionThis week on Upwardly Mobile, we dive deep into the tactics of the prolific criminal group ShinyHunters and explore how global enterprises are responding to sophisticated cyber extortion attempts in 2025. We analyze two major security incidents that highlight critical vulnerabilities in legacy systems and modern OAuth ecosystems. The Extortion Dilemma: Checkout.com Stands FirmWe detail the

en

11:57

The Edge Advantage: Why Cloudflare and Approov...

Upwardly Mobile - API & App Security News ·

2025/11/07

Remote Attestation vs. RASP: Securing Mobile APIs at the Edge (Zscaler vs. Approov/Cloudflare) On this episode of Upwardly Mobile, we dive deep into the most critical architectural debate in mobile API security today: Does security enforcement belong on the client device (RASP) or off-device at the network edge (Remote Attestation)? We break down the philosophical and technical differences between the integrated Zscaler ZSDK approach, which bundles Runtime Application Self-Protection (RASP), and the

en

10:13

App Store Revolution: Google Play Opens to...

Upwardly Mobile - API & App Security News ·

2025/11/03

Upwardly Mobile: Episode Notes Episode Title: App Store Revolution: Google Play Opens to Third-Party Payments (The Epic Games Aftermath) Summary: In this episode of Upwardly Mobile, we break down the monumental shift in the Android ecosystem following the Supreme Court’s refusal to hear Google's final appeal. Google has finally opened its Google Play app store to third-party payment options for U.S. developers, settling a multi-year legal battle initiated by Epic Games. We discuss what this means

en

15:00

NPM Nightmare: & Cloudflare AI That Secured End Users...

Upwardly Mobile - API & App Security News ·

2025/10/31

The Billion-Download Backdoor: Defending Client-Side Supply Chains Against Crypto-Draining NPM Attacks--------------------------------------------------------------------------------Episode NotesIn early September 2025, the open-source software ecosystem faced a massive supply chain attack when attackers compromised trusted maintainer accounts on npm using targeted phishing emails. This security breach led to the injection of malicious code into 18 widely used npm packages—such as chalk, debug,

en

14:02

The Unseen Storm: Securing APIs and Protecting...

Upwardly Mobile - API & App Security News ·

2025/10/27

The Unseen Storm: Securing APIs and Protecting Against Key ExposureThis week on Upwardly Mobile, we delve into the hidden dangers lurking within seemingly simple applications and the advanced solutions required to close the modern mobile security trust gap. We analyze a case study involving a basic weather application to illustrate how common development mistakes—like exposing sensitive API keys and neglecting input validation—create catastrophic security vulnerabilities, potentially leading to data

en

12:39

UK Competition and Markets Authority (CMA) designate...

Upwardly Mobile - API & App Security News ·

2025/10/22

UK CMA Declares Apple & Google Have Strategic Market Status (SMS): The Future of Mobile Competition and Security In this pivotal episode of "Upwardly Mobile," we break down the monumental decision by the UK Competition and Markets Authority (CMA) to officially designate Apple and Google with Strategic Market Status (SMS) in their respective mobile platforms. This move is set to reshape digital markets across the UK and has massive implications for app developers, businesses, and mobile security

en

12:00

F5's Zero-Day Roadmap and the Unacceptable Risk to...

Upwardly Mobile - API & App Security News ·

2025/10/20

API Security Under Fire: F5's Zero-Day Roadmap and the Unacceptable Risk to Mobile AppsThe F5 BIG-IP Breach and What It Means for Developers This week on Upwardly Mobile, we dive into the fallout from the catastrophic security breach at F5 Networks, where a sophisticated nation-state adversary compromised the integrity of the critical BIG-IP product line. We discuss why this incident poses an imminent and unacceptable risk to organizations—especially mobile app developers who rely on F5 devices for

en

10:20

Corporate Extortion and the Fall of BreachForums:...

Upwardly Mobile - API & App Security News ·

2025/10/14

Corporate Extortion and the Fall of BreachForums: Tracking ShinyHuntersIn this episode of "Upwardly Mobile," we dive into the world of high-stakes corporate extortion, focusing on the sophisticated cybercriminal group ShinyHunters (also tracked as UNC6040) and the subsequent takedown of their infamous platform, BreachForums. The sources detail how the FBI, in collaboration with French law enforcement authorities, seized the Breachforums.hn domain, which the Scattered Lapsus$ Hunters (a gang linked

en

11:32

Next Generation Attestation to Secure Mobile Apps...

Upwardly Mobile - API & App Security News ·

2025/10/11

Mobile is officially the digital default. In this episode of Upwardly Mobile, we explore the staggering statistics showing mobile devices dominating global internet usage and discuss the critical security challenges that arise from this mobile-first environment. We then delve into the cutting-edge solution offered by our sponsor, Approov, and their latest platform update, Approov 3.5, designed to secure brands against evolving threats, including AI-driven attacks and new regulatory pressures.The

en

10:49

Big Tech's Gamble: Lawsuits Challenge Apple, Google,...

Upwardly Mobile - API & App Security News ·

2025/10/05

In this episode of Upwardly Mobile, we dive into the significant legal challenges facing major technology companies—Apple, Google (Alphabet), and Meta Platforms—as they are forced to defend themselves against class action lawsuits alleging that they promoted and profited from illegal social casino gambling apps. A recent ruling by U.S. District Judge Edward Davila in San Jose, California, denied the companies' requests to dismiss the lawsuits. The plaintiffs, numbering in the dozens, contend that

en

10:56

How Misconfigured Firebase Servers Exposed User...

Upwardly Mobile - API & App Security News ·

2025/10/03

In this critical episode of Upwardly Mobile, we delve into the alarming cybersecurity incident involving massive data exposure stemming from misconfigured Firebase servers. Cybersecurity researchers uncovered a breach that exposed the sensitive information and plaintext passwords of over 1.8 million users. This wasn't the result of sophisticated hacking, but rather "basic negligence" and developers failing to implement standard security settings.We discuss why Firebase, Google's popular

en

12:04

Neon's Data Disaster: How a Viral AI App Exposed...

Upwardly Mobile - API & App Security News ·

2025/09/29

Neon's Data Disaster: How a Viral AI App Exposed 75,000 Users and Went DarkIn this urgent episode of Upwardly Mobile, we break down the spectacular rise and immediate fall of the highly controversial mobile application, Neon. The app, which recently topped the charts and went viral on platforms like TikTok, promised users payment in exchange for recording their phone calls. These recordings were then sold to AI companies for training. However, less than 24 hours after gaining widespread attention, a

en

12:58

Google's Legal Gauntlet: Antitrust Battles and the...

Upwardly Mobile - API & App Security News ·

2025/09/26

Google's Legal Gauntlet: Antitrust Battles and the Future of the App Ecosystem This week on Upwardly Mobile, we dissect the flurry of major legal decisions facing Google in September 2025, from its desperate plea to the Supreme Court to halt the Epic Games injunction to the final ruling in the federal search monopoly case. We explore the massive shifts coming to the Android app ecosystem and Google's mandated business practice changes. Episode Notes September 2025: A Critical Month for Google's

en

110 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs