The Curious Engineer

All blogs / Security

https://www.cossacklabs.com/resources/

cossacklabs.com/blog

SecurityMobile / iOS / Android

’15’16’17’18’19’20’21’22’23’24’25’26
Posts
68 from 3 Jun 2015 to 6 Oct 2026
Posting
now and then (1 in the last year)
Kind
company blog
Feed
https://www.cossacklabs.com/blog/index.xml

2026 1

  1. The resilience gap in CNI: How OT virtualisation addresses modern cyber-kinetic threats | Cossack Labs

2025 1

  1. How mobile app analytics library led to the PII exposure | Cossack Labs

2024 5

  1. SBOM from the security perspective | Cossack Labs
  2. Protecting ML models running on edge devices and mobile apps | Cossack Labs
  3. Cossack Labs Mobile Security Score framework for mobile AppSec | Cossack Labs
  4. Security autotests for measurable and stable application security processes | Cossack Labs
  5. Practical OAuth security guide for mobile applications | Cossack Labs

2023 5

  1. Security tips on using YubiKey and FIDO U2F | Cossack Labs
  2. Flutter application security considerations | Cossack Labs
  3. Digital payment security: Architecture guide | Cossack Labs
  4. How to prevent digital wallet fraud | Cossack Labs
  5. Exploring security vulnerabilities in NFC digital wallets | Cossack Labs

2022 5

  1. Smart contract security audit: tips & tricks | Cossack Labs
  2. Introduction to automated security testing | Cossack Labs
  3. Cryptographic failures in RF encryption allow stealing robotic devices | Cossack Labs
  4. React Native libraries: Security considerations | Cossack Labs
  5. TLS certificate validation in Golang: CRL & OCSP examples | Cossack Labs

2021 2

  1. Crypto wallets security as seen by security engineers | Cossack Labs
  2. Shared responsibility model in cloud security: mind the gap | Cossack Labs

2020 5

  1. React Native app security: Things to keep in mind | Cossack Labs
  2. Audit logs security: cryptographically signed tamper-proof logs | Cossack Labs
  3. How to build OpenSSL for Carthage iOS | Cossack Labs
  4. OpenSSL for iOS: tricks of OpenSSL semver | Cossack Labs
  5. PII Encryption Requirements. Cheatsheet | Cossack Labs

2019 10

  1. Lift & Shift: cloud security strategy | Cossack Labs
  2. How to prepare for data security issues | Cossack Labs
  3. Implementing End-to-End encryption in Bear App | Cossack Labs
  4. Secure search over encrypted data | Cossack Labs
  5. Install Acra 1-Click App through DigitalOcean Marketplace | Cossack Labs
  6. Acra on DigitalOcean Marketplace | Cossack Labs
  7. Defense in depth security strategy based on data encryption | Cossack Labs
  8. How to build an SQL Firewall | Cossack Labs
  9. How to prevent SQL injections when WAF’s not enough | Cossack Labs
  10. Blockchain & GDPR: dos and don’ts while achieving compliance | Cossack Labs

2018 6

  1. Hiring External Security Team: What You Need to Know | Cossack Labs
  2. How to Implement Tracing in a Modern Distributed Application | Cossack Labs
  3. GDPR for software developers: implementing rights and security demands | Cossack Labs
  4. Poison Records in Acra – Database Honeypots for Intrusion Detection | Cossack Labs
  5. How to reduce Docker image size (Example) | Cossack Labs
  6. Moving to OpenSSL 1.1.0 — How We Did It | Cossack Labs

2017 5

  1. Auditable Macros in C Code | Cossack Labs
  2. Replacing OpenSSL with Libsodium | Cossack Labs
  3. Replacing OpenSSL with BoringSSL in a Complex Multi-Platform Layout | Cossack Labs
  4. Importing with ctypes in Python: fighting overflows | Cossack Labs
  5. Plugging leaks in Go memory management | Cossack Labs

2016 15

  1. 13 tips to enhance database and infrastructure security | Cossack Labs
  2. Why making Internet safe is everyone’s responsibility | Cossack Labs
  3. Key management in data security: fundamentals | Cossack Labs
  4. Backend security: design patterns best practices | Cossack Labs
  5. Zero Knowledge Protocols without magic | Cossack Labs
  6. Perimeter security: avoiding disappointment, shame and despair | Cossack Labs
  7. Choose your Android crypto (Infographic) | Cossack Labs
  8. Building Sesto, in-browser password manager | Cossack Labs
  9. Benchmarking Secure Comparator | Cossack Labs
  10. Crypto in iOS: Choose your destiny (Infographic) | Cossack Labs
  11. Building secure end-to-end webchat with Themis | Cossack Labs
  12. Building LibreSSL for PNaCl | Cossack Labs
  13. Building and Using Themis in PNaCl | Cossack Labs
  14. What's wrong with Web Cryptography | Cossack Labs
  15. Fixing Secure Comparator | Cossack Labs

2015 8

  1. Introducing Secure Comparator | Cossack Labs
  2. Why we need novel authentication schemes? | Cossack Labs
  3. WeakDH/LogJam vs Secure Session | Cossack Labs
  4. Armoring ed25519 to meet extended security challenges | Cossack Labs
  5. Why you should avoid SSL for your next application | Cossack Labs
  6. Building encrypted chat service with Themis and mobile websocket example | Cossack Labs
  7. Notes on adding cutting edge features | Cossack Labs
  8. Releasing Themis into public: usability testing | Cossack Labs