Information leakage and applications asking for too many permissions were both major issues, Synopsys stated. The applications exposed hundreds of thousands of URLs, tens of thousands of IP addresses, and thousands of e-mail addresses, as well as more sensitive information, such as OAuth tokens, asymmetric private keys, AWS keys, and JSON Web Tokens.

Read full article on Dark Reading