SBA Security Meetup: From OWASP to App Secrets – Lessons Learned
End of October, we had our SBA Security Meetup on From OWASP to App Secrets – Lessons Learned with to insightful talks from Fabian Funder (SBA Research) and David Schmidt (Universität Wien).
Talks
1. SBA Top 10 Software Vulnerabilities – a Revue
Speaker: Fabian Funder (SBA Research)
SBA Research analyzed real-world penetration testing results from Austrian organizations to compile its own Top 10 Software Vulnerabilities. The talk outlines the most frequent and severe weaknesses found in practice, recurring security pitfalls, and the vulnerabilities most commonly encountered in Austrian systems.
2. Leaky Apps: Large-scale Analysis of Secrets Distributed in Android and iOS Apps
Speaker: David Schmidt (University of Vienna)
A large-scale study of 10,331 mobile apps revealed 416 valid credentials across 65 services, with many exposing sensitive data like Git keys. iOS apps leaked more secrets than Android ones, and developers often failed to revoke credentials even after removing them – leaving systems vulnerable.
© SBA Research