[CLSTR]
API
< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

2 clusters · 3 sources · 11 days · First seen · Last updated

App-to-Backend cybersecurity threats

Overview

AI Security Lab released a diagnostic tool designed to combat App-to-Backend (A2B) attacks. These attacks involve analyzing Android applications to identify vulnerabilities in connected APIs and backend servers, such as authentication flaws or configuration errors, which can lead to unauthorized access or data leaks.

Security experts, including the National Institute of Information and Communications Technology (NICT), have warned of an escalation in these threats. The NICT noted that while the focus is often on Android, iOS apps and web services are also susceptible to these methods, which can result in massive data breaches even when the mobile application itself remains secure.

Entities

AI Security Lab · iOS · Android · NIKKE · National Institute of Information and Communications Technology

Timeline

  1. [TECHNOLOGY] 3 sources
    Cybersecurity threats escalate via App-to-Backend attacks and malware

    Security warnings have been issued regarding A2B attacks targeting backend servers via app analysis and malware discovered in the NIKKE PC game launcher.

  2. [TECHNOLOGY] 2 sources
    AI Security Lab launches diagnostic tool for A2B attacks

    AI Security Lab has released a new diagnostic tool using generative AI to detect A2B attacks that target backend servers via Android app API analysis.

Sources

ascii.jp · gahalog.2chblog.jp · weekly.ascii.jp