Zimperium customers detected hundreds of thousands of threats from April 1 through June 30, 2017, at the device, network or app levels. - Device Threats and Risks – Threats to the device or OS, including unpatched vulnerabilities - Network Threats – Threats delivered to the device via the cell network or Wi-Fi - App Threats – Mobile malware, spyware, adware, or “leaky apps” on devices

1. 0All Rights Reserved © 2017
Zimperium Global Threat Intelligence
Q2 2017
The Threat Is Real

2. 1All Rights Reserved © 2017
Mobile OS is Constantly Changing
Source: CVE.Mitre.org. CVEDetails.com: Android and iOS CVEs
0
100
200
300
400
500
600
700
800
2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017
CVE Score 7+
CVE Score 1-6
First half of
2017 nearly
surpassed
all of 2016

3. 2All Rights Reserved © 2017
Device Risks
23% of iOS
devices not
updated despite
update being
available for 45
days
94% of Android
devices not
running latest 2
versions
23%
94%
Source: Zimperium Global Threat Report Q2 2017
https://blog.zimperium.com/mobile-threat-data-q2-2017/

4. 3All Rights Reserved © 2017
iOS Device Risks
23% of iOS
devices not
updated despite
update being
available for 45
days
Approximately 1 of 4
devices are not
running the latest
security patches and
introducing
unnecessary risk
Source: Zimperium Global Threat Report Q2 2017
https://blog.zimperium.com/mobile-threat-data-q2-2017/

5. 4All Rights Reserved © 2017
Network Threats
5 % of devices
detected a scan
80% of these
devices detected a
MITM
Source: Zimperium Global Threat Report Q2 2017
https://blog.zimperium.com/mobile-threat-data-q2-2017/

6. 5All Rights Reserved © 2017
1 of 50 iOS
apps have
severe privacy
and security
issues.
App Threats
• Malware
• Shares Keychain
• Weak Encryption
• Private Dev
Frameworks
• Shares Private Info
• Reads Device ID
• Stores over USB
Source: Zimperium Global Threat Report Q2 2017
https://blog.zimperium.com/mobile-threat-data-q2-2017/

7. 6All Rights Reserved © 2017