We just wrapped up a wild week at the annual RSA Conference out in San Francisco, filled with exciting sessions, vulnerability announcements, official awards, and Twitter accolades. We wouldn’t want you to miss out on any of the news, so we thought we’d recap some of the highlights for you. Without further ado…
1. Android for Work vulnerability is disclosed
In our session “Mobile Containers- The Good, the Bad, and the Ugly”, Adi Sharabani, our CEO and co-founder, alongside Yair Amit, CTO and co-founder, demonstrated new vulnerabilities that our Skycure Mobile Security Research Labs discovered in Android for Work. Introduced in Lollipop 5.0, the idea behind Android for Work was to help enterprises support BYOD initiatives. Essentially, a work persona is established on the device with business level controls and container isolation from the personal persona. The goal, of course, is that the business side is protected in a secure container away from the personal side. Unfortunately, that isn’t quite how things turned out, as our “app-in-the-middle” attacks proved. See all the details here – https://www.skycure.com/blog/app-in-the-middle/.
To make a long story short, the containers that enterprises are relying on to keep their valuable data secure are vulnerable to system-level permission vulnerabilities. We’ve received a ton of great news coverage outlining this discovery, including articles in Dark Reading, PC Magazine, Digital Trends, Threatpost, and CSO, Infosecurity Magazine, SC Magazine, Security Week, Bleeping Computer [as well as syndicated posts in Infosec News Ireland, PC Magazine India, Fox Business, Computer Magazine, The Post Star, Watertown Public Opinion, One News Page, The Journal Star, Yahoo! News, Yahoo! Finance, IT Security News, Team Security and The Truth Is In Here], and the list will be longer tomorrow.
2. Two more awards
It’s not every week a company earns two prestigious awards, but that’s what happened this week.
First, Cyber Defense Magazine once again recognized Skycure for continued innovation in Mobile Threat Defense, granting us the 2017 Next Gen Mobile Endpoint Security Solution.
Skycure was also proud to be named the Info Security Products Guide’s winner of the 2017 Global Excellence Awards in the category of Enterprise Mobile Threat Defense. Winners are selected after a panel of 40 judges submit their votes across categories. Here is a picture of me accepting our award at the 13th annual awards ceremony.
3. Attendee accolades
It’s also a proud tradition of Skycure to provide great swag at RSA. In 2015, we were unofficially honored as having the best giveaway which we, of course, had again this year, too. We also earned Twitter accolades for having the best shirts at the conference:
4. Best Demo
Lastly, word on the show floor is that we also had the best demo, where we use a malicious iOS profile attack in less than 30 seconds to show people just how insecure their smart phones really are. After infecting a device, we showcase how attackers perform content manipulation, SSL decryption, LinkedIn impersonations, stealing email credentials, and much, much more!
That wraps up our wild week at the RSA conference this year. If you’d like to learn more about Skycure’s Mobile Threat Defense solution, be sure to check out all the benefits we provide enterprises as well as our customer testimonials.