Mobile Trading Apps Fail Key Security Features Test

Leading global Cybersecurity Cybersecurity Cybersecurity is a blanket term that refers to the protection of computer systems and networks from the theft.More broadly speaking, cybersecurity can also represent countermeasures against damage to hardware, software, or electronic data, as well as from the disruption or misdirection of the services they provide.It was not long ago that the term cybersecurity not exist as it was first used in 1989. In today’s vernacular cybersecurity, refers to measures taken to protect a computer or computer Cybersecurity is a blanket term that refers to the protection of computer systems and networks from the theft.More broadly speaking, cybersecurity can also represent countermeasures against damage to hardware, software, or electronic data, as well as from the disruption or misdirection of the services they provide.It was not long ago that the term cybersecurity not exist as it was first used in 1989. In today’s vernacular cybersecurity, refers to measures taken to protect a computer or computer Read this Term consultant IOActive today released a security report covering 21 of the most popular mobile trading apps, and it warns of major security flaws in all of them. In its report, it stated that the security features of the apps are worse than the personal banking apps tested in 2013 and 2015.

Register now to the London Summit 2017, Europe’s largest gathering of top-tier retail brokers and institutional FX investors

A point worth mentioning is that the trading apps generate billions of dollars worth of transactions from millions of users, and they are vulnerable to scams and losses. The test, conducted by IOActive's senior security consultant Alejandro Hernandez, mentioned the details of security flaws in a blog post published today.

• About 19 percent of the apps expose passwords in clear text, meaning that attackers can gain access to the information if they gain physical access to the device.
• Around 62 percent of the apps send sensitive data to log files and 67 percent store unencrypted data.
• 2 apps use encrypted HTTPs channels to receive and send data, and 13 fail to check the authenticity of the remote endpoint by verifying its SSL certificate, making them vulnerable to hacks via public Wi-Fi hotspots.
• 5 apps do not incorporate fingerprint-reading as a security measure.

The report has not been well received by the firms whose apps were tested. Only 2 of 13 brokerages have responded to IOActive's results.

Hernandez said: "We have better security in the mobile apps used to check our bank balance and pay the gas bill than in the trading apps that transfer billions in shares and shape the financial market as we know it.

Cybersecurity is not the first concern for people in the Fintech Fintech Financial Technology (fintech) is defined as ay technology that is geared towards automating and enhancing the delivery and application of financial services. The origin of the term fintechs can be traced back to the 1990s where it was primarily used as a back-end system technology for renowned financial institutions. However, it has since grown outside the business sector with an increased focus upon consumer services.What Purpose Do Fintechs Serve?The main purpose of fintechs would be to suppl Financial Technology (fintech) is defined as ay technology that is geared towards automating and enhancing the delivery and application of financial services. The origin of the term fintechs can be traced back to the 1990s where it was primarily used as a back-end system technology for renowned financial institutions. However, it has since grown outside the business sector with an increased focus upon consumer services.What Purpose Do Fintechs Serve?The main purpose of fintechs would be to suppl Read this Term space, most of which are not technical, and nor are the people using the apps themselves. Most don’t know what’s sensitive and what needs to be properly secured. By comparison, it’s far easier to understand what constitutes sensitive information in a personal banking app, hence they are far better secured. Historically, security researchers have disregarded trading apps as well, probably because of a lack of understanding of money markets.

In addition to the generic IT best practices for secure software development, regulators should develop trading-specific guidelines to be followed by the brokerage firms and fintech companies in charge of creating trading software. Brokerage firms should perform regular internal audits to continuously improve the security posture of their trading platforms."