Android Apps Fail to Protect User Data During Device Transfer

Several Android applications have been observed not invalidating or revalidating session cookies during app data transfers from one device to another. According to a new advisory by CloudSEK researchers, this technique could allow an attacker to use a highly privileged…








