mobile-security
Safeguard articles tagged "mobile-security" — guides, analysis, and best practices for software supply chain and application security.
47 articles
Is react-native-background-upload Safe to Ship?
react-native-background-upload moves files while your app is backgrounded, which is exactly why its security depends on how you handle URLs, tokens, and native permissions.
react-native-google-places-autocomplete: A Security Guide
The react-native-google-places-autocomplete component makes location search easy, but it can also leak your Google API key straight out of a shipped app. Here's how to use it safely.
Android Application Security Solutions That Reduce Real Risk
Android application security solutions span secure storage, network hardening, code protection, and dependency scanning. Here is what each layer covers and how iOS compares.
react-native-blob-util: A Security Guide to Safe File and Blob Handling
react-native-blob-util is the maintained successor to rn-fetch-blob. Here is what it does, why the migration matters for security, and how to handle files safely.
iOS App Security Testing: A Practical Guide for Mobile Teams
iOS app security testing means checking storage, transport, and third-party code, not just trusting the App Store review. Here is how to do it well.
Vetting React Native npm Packages: pager-view, paper, video, config
Before you add react-native-pager-view npm installs to a mobile app, run the same vetting you would for backend code. Here is a practical checklist using four popular packages as case studies.
rn-fetch-blob: Maintenance Status, Risks, and Alternatives
The rn-fetch-blob npm package hasn't shipped a release since 2020. Here's what that means for React Native apps still depending on it, and how to migrate to react-native-blob-util.
Is react-native-device-info Safe? A Security Guide
react-native-device-info is one of the most-used device fingerprinting libraries in React Native. Here is how to use it without leaking data or tripping privacy reviews.
react-native-asset: A Security Guide to Linking Assets
react-native-asset links fonts, sound files, and other assets into iOS and Android builds. Here is how it works and the supply-chain hygiene it deserves.
Ivanti EPMM Zero-Day CVE-2023-35078: Norwegian Government Breach
A critical authentication bypass in Ivanti's Endpoint Manager Mobile was exploited to breach Norwegian government agencies, earning a perfect CVSS 10.0 score.
iOS app supply chain risk from third-party SDKs and ad li...
Third-party SDKs and ad libraries run inside your iOS app with your app's permissions. Here's how ios sdk supply chain risk hides in plain sight — and what Safeguard does about it.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.