Thursday, May 1, 2025

Security Boulevard

The Home of the Security Bloggers Network

Community Chats Webinars Library

Home
Security Creators Network
Webinars
Events
- Upcoming Events
- On-Demand Events
Sponsored Content
Chat
Library
Related Sites
Media Kit
About
Sponsor

Analytics
AppSec
CISO
Cloud
DevOps
GRC
Identity
Incident Response
IoT / ICS
Threats / Breaches
More
Humor

Security Bloggers Network

Home » Security Bloggers Network » Blog – Checkmarx 2019-02-13 17:10:54

Blog – Checkmarx 2019-02-13 17:10:54

by Erez Yalon on February 13, 2019

Android App
Android WebView
exposed API
MagicLinks
Man in the Middle
self-replicating worm

Techstrong Gang Youtube

AWS Hub

Erez Yalon

Erez Yalon heads the security research group at Checkmarx. With vast defender and attacker experience and as an independent security researcher, he brings invaluable knowledge and skills to the table. Erez is responsible for maintaining Checkmarx’s top notch vulnerability detection technology where his previous development experience with a variety of coding languages comes into play.

Latest posts by Erez Yalon

Diving Deep into Regular Expression Denial of Service (ReDoS) in Go – May 7, 2018

Decrypting JobCrypter – March 19, 2018

The Top 5 Exfiltration Attacks on WebViews – January 22, 2018

Recent Articles By Author

Privilege Escalation on Meetup.com Enabled Redirection of Payments
Mutation Cross-Site Scripting (mXSS) Vulnerabilities Discovered in Mozilla-Bleach
It’s Time to Update Your Drupal Now!

More from Erez Yalon

*** This is a Security Bloggers Network syndicated blog from Blog – Checkmarx authored by Erez Yalon. Read the original post at: https://www.checkmarx.com/2019/02/14/android-app-risk/

February 13, 2019February 14, 2019 Erez Yalon Android App, Android WebView, Blog, exposed API, MagicLinks, Man In The Middle, self-replicating worm, Technical Blog

← XKCD, Launch Risk
Preview Pain: Malware Triggers in Outlook Preview Without User Opening Word Document →

Techstrong TV

Click full-screen to enable volume control

Watch latest episodes and shows

AI Infrastructure Field Day

Upcoming Webinars

Software Supply Chain Security: Navigating NIST, CRA, and FDA Regulations

Is DevEx the Same as DevSecOps?

Podcast

Listen to all of our podcasts

Press Releases

GoPlus's Latest Report Highlights How Blockchain Communities Are Leveraging Critical API Security Data To Mitigate Web3 Threats

GoPlus’s Latest Report Highlights How Blockchain Communities Are Leveraging Critical API Security Data To Mitigate Web3 Threats

C2A Security’s EVSec Risk Management and Automation Platform Gains Traction in Automotive Industry as Companies Seek to Efficiently Meet Regulatory Requirements

C2A Security’s EVSec Risk Management and Automation Platform Gains Traction in Automotive Industry as Companies Seek to Efficiently Meet Regulatory Requirements

Zama Raises $73M in Series A Lead by Multicoin Capital and Protocol Labs to Commercialize Fully Homomorphic Encryption

Zama Raises $73M in Series A Lead by Multicoin Capital and Protocol Labs to Commercialize Fully Homomorphic Encryption

RSM US Deploys Stellar Cyber Open XDR Platform to Secure Clients

RSM US Deploys Stellar Cyber Open XDR Platform to Secure Clients

ThreatHunter.ai Halts Hundreds of Attacks in the past 48 hours: Combating Ransomware and Nation-State Cyber Threats Head-On

ThreatHunter.ai Halts Hundreds of Attacks in the past 48 hours: Combating Ransomware and Nation-State Cyber Threats Head-On

Subscribe to our Newsletters

Most Read on the Boulevard

Anthropic Outlines How Bad Actors Abuse Its Claude AI Models

AppOmni Adds MCP Server to Platform for Protecting SaaS Applications

Cisco Unveils Open Source AI Reasoning Model for Cybersecurity Use Cases

Proofpoint Leverages AI to Extend Scope of Cybersecurity Reach

Cybersecurity CEO Charged With Installing Malware on Hospital Computers

Blue Shield of California Data Breach Exposes 4.7M Members’ Info

Identity is the New Perimeter: CybeReady’s Analysis of IBM’s X-Force 2025 Threat Intelligence Index

Breaking Down CVE-2025-31324 A Clear Threat to SAP Business Operations

‘Slopsquatting’ and Other New GenAI Cybersecurity Threats

NSFOCUS APT Monthly Briefing – March 2025

Industry Spotlight

Cybersecurity Data Privacy Data Security Endpoint Featured Identity & Access Industry Spotlight Malware Network Security News Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Spotlight Threats & Breaches

Cybersecurity CEO Charged With Installing Malware on Hospital Computers

April 28, 2025 Jeffrey Burt | 3 days ago 0

Cybersecurity Data Privacy Data Security Featured Identity & Access Industry Spotlight Malware Mobile Security Network Security News Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Social Engineering Spotlight Threat Intelligence

North Korean Group Creates Fake Crypto Firms in Job Complex Scam

April 25, 2025 Jeffrey Burt | Apr 25 0

Application Security Cloud Security Cyberlaw Cybersecurity Data Privacy Data Security DevOps Featured Governance, Risk & Compliance Humor Incident Response Industry Spotlight Most Read This Week Network Security News Popular Post Security Awareness Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Spotlight Threats & Breaches Vulnerabilities

200,000 Workers’ PII at Risk in WorkComposer S3 SNAFU

April 25, 2025 Richi Jennings | Apr 25 0

Top Stories

Cybersecurity Featured News RSAC Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Spotlight

Report Exposes Soft Security Underbelly of Mobile Computing

May 1, 2025 Michael Vizard | Yesterday 0

AI and Machine Learning in Security AI and ML in Security Cybersecurity Featured News Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Spotlight

F5 Extends Security Reach to Large Language Models

April 30, 2025 Michael Vizard | 1 day ago 0

Cybersecurity Featured News RSAC Security Awareness Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Spotlight

Homeland Secretary Noem Vows to Put CISA ‘Back to Focusing on its Core Mission’

April 30, 2025 Jon Swartz | 1 day ago 0

Security Humor

Randall Munroe’s XKCD ‘Chess Position’

Randall Munroe’s XKCD ‘Chess Position’

Download Free eBook

Managing the AppSec Toolstack

Join the Community

Add your blog to Security Creators Network
Write for Security Boulevard
Bloggers Meetup and Awards
Ask a Question
Email: [email protected]

Useful Links

About
Media Kit
Sponsor Info
Copyright
TOS
DMCA Compliance Statement
Privacy Policy

Related Sites

Techstrong Group
Cloud Native Now
DevOps.com
Digital CxO
Techstrong Research
Techstrong TV
Techstrong.tv Podcast
DevOps Chat
DevOps Dozen
DevOps TV

Powered by Techstrong Group

Copyright © 2025 Techstrong Group Inc. All rights reserved.

Security in AI

Step 1 of 7

14%

How would you best describe your organization's current stage of securing the use of generative AI in your applications?(Required)

We don’t have or use generative AI in our applications

Nothing significant yet - We have or will have generative AI in our applications but haven’t yet researched or explored the possibility of securing it.

Starting - We have begun to work on securing generative AI in our applications.

Developing - We have started to implement some security measures for generative AI.

Average - We have some policies or tools in place.

Advanced - We have some enhanced security protocols specifically tailored for generative AI in our applications.

Very advanced - We have comprehensive, mature, and proactive security solutions for generative AI in our applications.

Have you implemented, or are you planning to implement, zero trust security for the AI your organization uses or develops?(Required)

Already implemented

Planning to implement

Considering or scoping to implement

Not considering zero trust for AI

Do not use zero trust at all

Don’t know

What are the three biggest challenges your organization faces when integrating generative AI into applications or workflows? (Select up to three)(Required)

Cost to implement

Potential impacts on performance or scalability of the applications

Lack of expertise or experience

Compliance with standards and regulations

Integration capabilities of current systems

Potential impacts on performance or scalability of the AI

Data security or privacy

Access security

Intellectual property protection

Security of prompts or responses

How does your organization secure proprietary information used in AI training, tuning, or retrieval-augmented generation (RAG)? (Select all that apply)(Required)

Encryption at rest

Encryption in transit

Data access control, monitoring

Data anonymization

Data/information isolation

Data masking/tokenization

Data governance policies

Zero trust / continuous authentication and authorization

No specific measures in place

Which of the following kinds of tools are you currently using to secure your organization’s use of generative AI? (select all that apply)(Required)

Native cloud service tools (AWS Guardrails, e.g.)

Third-party tools

Custom in-house tools

No specific tools

How valuable do you think it would it be to have a solution that classifies and quantifies risks associated with generative AI tools?(Required)

Extremely valuable

Very valuable

Somewhat valuable

Not valuable

What are, or do you think would be, the most important reasons for implementing generative AI security measures? (Select up to three)(Required)

Regulatory compliance

Protecting intellectual property

Mitigating potential data breaches

Maintaining customer trust

Competitive advantage

Improved risk management

Increased operational efficiency

Don’t know

Δ