Facebook sues data analytics firm OneAudience over malicious SDK

Facebook says OneAudience paid developers to install its social-media-profile-looting SDK into their apps to get marketing data for clients.

Facebook, Twitter profiles slurped by mobile apps using malicious SDKs

Hundreds of users gave permission to these third-party apps to access their social media accounts, but the apps got more handsy than that.

Google throws bug bounty bucks at mega-popular third-party apps

Google’s going to throw more bug bounty money at the problem of nasty apps in its Play Store, it announced on Thursday. In a post from the Android Security & Privacy team’s Adam Bacchus, Sebastian Porst, and Patrick Mutchler , the company said that it’s throwing the security net over not just its own apps, but […]

Snapchat issues first transparency report on law enforcement data requests

It’s a big step forward in transparency for Snapchat, which formerly described its service in a way that might lead users to think turning over their content to law enforcement would be impossible.

Snapchat to warn users about third-party apps, ask them to change their passwords

Instead of how it’s handled The Snappening mass image doxing aftermath so far – i.e., warning users that third-party apps are against its Terms of Use and trawling Google Play and the App Store to snuff them out – Snapchat will now sniff out Snapchatters using third-party apps, warn them that they’ve wandered into a scary app neighborhood, and ask them to change their passwords.

Reminder: iCloud’s going to demand app-specific passwords from third-party apps

Yes, your third-party calendar, mail and contacts apps that don’t support Apple’s new two-factor authentication system are going to turn 10 toes up on your iThings. You’ll need app-specific passwords to get at the cloud data.