Talsec

Academic-based and community-driven mobile security company. In-App protection SDKs | RASP | Security Hardening | Data Encryption. Established by Monet+ #Talsec

[Talsec @TalsecOfficial]

Meeting #Talsec for the first time? Let us introduce ourselves.🧵

[Talsec @TalsecOfficial]

In-app signature checks won't protect you if an in-process hook intercepts the call and feeds it genuine certs. Hirudo proves that once a hooking engine like YAHFA is in your process, your code will lie to itself about its own signature.

https://t.co/i1LTDJ8kfc

[Talsec @TalsecOfficial]

Root detection has evolved. Tools like Zygisk and Shamiko hide by operating inside the app process, making path scans obsolete.

Learn more:
https://t.co/Ja2JZxHol8

[Talsec @TalsecOfficial]

On a rooted device, encryption keys are rarely safe. White-box cryptography embeds keys into code so they never exist in plain memory, turning a 5-minute hack into a specialist project.

https://t.co/DPKmc73WkV

[Talsec @TalsecOfficial]

Choosing a device identifier is a trade-off between privacy and security. From MediaDRM to App Attest, we break down the persistence and risks of every major ID on Android and iOS. #MobileSecurity https://t.co/X66JUIehDQ

[Talsec @TalsecOfficial]

Security starts at boot. Our latest freeRASP update adds hardware-backed bootloader detection for Android. Catch environment risks before root tools even enter the picture.

Full details: https://t.co/DzFFQbftAe

[Talsec @TalsecOfficial]

CVE-2024-0044 broke the Android sandbox, letting attackers access private app data on non-rooted devices. Traditional root detection won't stop it, but RASP can. Learn how this vulnerability works. #AndroidSecurity #AppSec

https://t.co/Tb0GpHh6jn

[Talsec @TalsecOfficial]

Attackers don't need your source code. With Frida, they hook into your app at runtime - bypassing root detection, disabling SSL pinning, intercepting API secrets live.

Akshit Singh breaks down how it works and what developers can actually do about it.
https://t.co/5bxpIrbxMw

[Talsec @TalsecOfficial]

Rokarolla targets 200+ banking apps via overlays and accessibility abuse. Standard hardening isn't enough. Learn how to defend your app with RASP. #AppSec

https://t.co/YWZA5PsrfQ

[Talsec @TalsecOfficial]

On Android 11+, PackageManager reports the exact installer package, which means your RASP & malware detection config is only as good as your trusted source list.

We documented relevant package ID: OEM stores, cloners, ADB markers

https://t.co/Vm5ksyxxVf

[Talsec @TalsecOfficial]

🚨 1,215 malicious apps found on real user devices in just 30 days — banking trojans, spyware & droppers hiding as Roblox mods or photo files.

Here's what the data shows 👇
https://t.co/5r14YLIgtD

#MobileSecurity #AndroidMalware #AppSec

[Talsec @TalsecOfficial]

🌟 Exciting updates in the Talsec portal! 🚀 Discover streamlined navigation, enhanced security features, and customizable dashboards tailored just for you. Optimize your workflow today!

Check out the full details here: https://t.co/RP97fCysLO

#Talsec #AppSec #Cybersecurity

[Talsec @TalsecOfficial]

We are super pumped about our partnership with @GenDigitalInc! 🚀 It’s all about taking malware detection to the next level with the awesome tech from @Avast & @Norton. This means even better security for you! Wanna know more?

Check it out!
https://t.co/gfjsCwHJCj

[Talsec @TalsecOfficial]

Cyber threats are evolving, and they're not just hitting the big players anymore. It's time to get our defenses up! Dive into the report and stay ahead of the game.

Check it out 👉 https://t.co/wuzrbjQNgX

[Talsec @TalsecOfficial]

The battle of skills: Panel Engineers vs. Reverse Engineers! 🛡️ While one builds the fortress, the other analyzes and strengthens it. Learn how these two roles support security in the app world and why both are essential.

Check it out!
https://t.co/FXTNLGeJs4

[Talsec @TalsecOfficial]

🌐 Exploring the dark side of AI!

🤖💻 Dmitri Bogatenkov discusses essential defenses against machine-generated deception in Talsec's latest article. Don't fall victim to AI impersonators!

Check it out!
https://t.co/O7fBWpp8dS

#AI #CyberSecurity #MachineLearning

[Talsec @TalsecOfficial]

Read Talsec keynote on safety-security equilibrium. 🤔 It’s all about balancing user freedom with strong security. A must-read for anyone in tech! Let’s create a safer digital world together!

Check it out! 👉
https://t.co/oVJLLhtE0x

[Talsec @TalsecOfficial]

Tired of CAPTCHAs? Discover innovative ways to stop bots without the hassle! From behavior analysis to rate limiting, protect your site and improve user experience. 💡🚫🤖

Learn more: https://t.co/7Bs3oFdTPB

#CyberSecurity #WebSecurity #StopBots

[Talsec @TalsecOfficial]

🔒 Stay ahead of app security! Join Majid Hajian from Microsoft as he shares best practices to keep your applications safe. Discover key strategies to secure your software effectively! 💻✨

👉 Read more: https://t.co/Y9Lu4Xxcet

#AppSecurity #CyberSecurity #TechTalk

[Talsec @TalsecOfficial]

🚀 Exciting insights on predictive app protection! If you want to stay ahead of threats and secure your applications smarter than ever, this is a must-read. Tap into the future of security tech!

🔐 https://t.co/XLwszr6oMk

[Talsec @TalsecOfficial]

🚨 Warning for Flutter developers! Insufficient cryptography is the #10 risk on the OWASP list. Protect your app by implementing strong encryption techniques. Don't compromise on security!

🔒 Check out final article of OWASP TOP 10 for Flutter:
https://t.co/IFmuQvlHG2