In-app browser security risks, and what to do about them

by Admin on Sep 6, 2022 12:00:00 AM

In-app browsers can pose significant security risks to businesses, with their tendency to track data a primary concern. This was highlighted in recent research which examined how browsers within apps like Facebook, Instagram and TikTok can be a data privacy risk for iOS users. Researcher Felix Krause detailed how popular in-app browsers inject JavaScript code into third-party websites, granting host apps the ability to track certain interactions, including form inputs like passwords and addresses along with image/link clicks.

Meta and TikTok were quick to state that their activities are benign, but their historical behavior coupled with the potential for other apps or malicious actors to misuse/exploit this ability is worrying, particularly when in-app browsing is done on work devices that connect to corporate networks and store business information. Security teams should therefore be aware of the threats in-app browsers can pose to an organization and take steps to help address the risks.

Podcast Appearance: Facing Cyberthreats and Misinfo in a Tense Political Climate

In this episode of DOS Won’t Hunt, Eric Wenger, senior director for cyber and emerging tech policy with Cisco; Roman Arutyunov, co-founder and senior vice president of products with Xage Security; Dennis Dayman, CISO with Code42; TK Keanini, CTO with DNSFilter; and Akash Agarwal, director of engineering and DevSecOps with LambdaTest, discuss ways to address possible cyber threats and misinformation in the workplace during this intensely partisan ...

Public Wi-Fi is table stakes, and unsecured Wi-Fi is risky business

While public Wi-FI can be very convenient, both for users and providers, it also introduces a number of security challenges. Unsecured or under-secured public Wi-Fi networks can expose users to cyber threats like identity theft, financial fraud and data breaches. Once they are connected, attackers can monitor all traffic, extract sensitive data, and even inject and spread malware.

CIO Influence Interview with TK Keanini, CTO of DNSFilter

TK is a leader in technical innovation, specializing in the identification and protection of intellectual properties. With a background in game development and information security, he balances design’s social and technical aspects. Known for his ability to acquire top talent and build high-performing teams at DNSFilter.