While there are multiple options when it comes to choosing a library that implements secure storage in React Native, it is crucial to ensure that the data are stored properly and ideally without any known vulnerabilities. …

Recently, Talsec team has dedicated time and effort to explore different options for secure storage on the Flutter platform. While storing data is a straightforward task, ensuring its security requires careful consideration. This article assumes you are familiar with: How data storage works on native platforms Android Keystore, Keychain and…

Did you know that you can remove plugins dynamically from a Flutter app on Android? During the implementation of a new feature on freeRASP (more about it here), we noticed that unregistering of plugins is possible using the FlutterEngine class. While it may seem unimportant, we decided to push the…

Gone are the days of locally-held data and standalone applications. With the rise of smartphones and portable devices, we are constantly on the go and reliant on network calls for everything from social communication to live updates. As a result, protecting backend servers and API calls has become more crucial…

It is predicted that there will be whopping 7.49 billion mobile phone users worldwide by 2025. With great power comes great responsibility, and every experienced software developer should thrive to follow security standards to ensure that their app is secured against cyber criminals. Technologies like RASP (Runtime Application Self-Protection) are…

JWT Token, MiTM Attacks and API Protection. Keep them properly protected and don’t put your enterprise at risk. Part 1 (link) ↓ Disassemble app. Extract its secrets. Part 2 (link) ↓ Make a fake clone. Check every transmitted JSON. Inject code. Part 3 (this article) ↓ Steal authentication tokens. and…

OWASP Mobile Application Security guides all phases of mobile app development and testing. The Verification Standard and the Testing Guide will provide you with a security standard and a baseline for mobile app security verification curated by a community dedicated to improving software security. …

Highly recognized freeRASP SDK providing app protection and threat monitoring for mobile devices arrived in the Cordova ecosystem! This article will help you understand runtime application self-protection, explore freeRASP capabilities, and shield your app against threats! The popularity of the hybrid app development The popularity of hybrid platforms continues to grow, and companies have adopted them widely…

Either you want to hack Flutter apps, or you want to make them bulletproof. I will show you how it’s done. My name is Tomáš Soukal, and I am a security consultant at Talsec. …