SAST, DAST, and IAST are foundational to application security, but each leaves critical gaps. Learn how these testing approaches work, where they fall short, and what security teams must understand to reduce real-world risk.
Our researchers found a modified Android launcher app, pre-installed on several budget phone models, that can silently install/remove/replace apps over connections that don’t properly validate SSL/TLS certificates and checks every four hours for arbitrary code to execute with system privileges.
Quokka analyzed 3,000+ healthcare and medical mobile applications spanning a broad range of healthcare-related categories and found critical mobile app security risks. Read more on the vulnerabilities and how to secure healthcare apps.
State actors are using mobile apps to collect intelligence, influence targets, and support operations. Learn why mobile app vetting is becoming a national security imperative.
Thailand’s new government benefit scheme was barely live before scammers struck. Read more about the scam and the overall mobile fraud problem.
A new DHS OIG report revealed serious mobile security failures that resulted in a higher risk of cyberattacks and unauthorized access to sensitive information.
Zero Trust shrank your network attack surface but mobile apps are expanding it fast. AI is accelerating both development and exploitation, leaving enterprises exposed where they have the least visibility.
Quokka analyzed over 150,000 mobile apps and found that foundational security weaknesses remain widespread across both Android and iOS apps. Read the analysis.
On March 31, 2026, the FBI’s Internet Crime Complaint Center published a public service announcement warning about the data security risks of foreign-developed mobile apps frequently used in the United States.
Copyright © 2026, Quokka. All rights reserved.
