A few days ago, developer Felix Krause shared a detailed report on how mobile apps can use their own in-app web browser to track user data. Now Krause is back with a new tool that lets anyone see ...

Developer Felix Krause found TikTok's iOS app injecting code that could enable it to monitor all keyboard inputs and taps. Aka, keylogging.

I do have proof that the Instagram and Facebook app actively run JavaScript commands to inject an additional Javascript SDK without the user’s consent, as well as tracking the user’s text ...

A new finance spam campaign with HTML attachments has been discovered that utilizes Google's public DNS resolver to retrieve JavaScript commands embedded in a domain's TXT record. These commands will ...