Unsecured Cloud Configurations Exposing Information in Thousands of Mobile Apps

This zLabs research report documents that a significant fraction of mobile apps using cloud storage (e.g., Firebase, AWS, Azure) are misconfigured and publicly accessible, exposing personally identifiable information, payment/session data, and internal infrastructure/configuration files. The authors found ~14% of analyzed apps with insecure cloud containers, provided concrete examples across app categories (medical, finance, social, enterprise), and recommend securing cloud storage and integrating continuous mobile app security testing into CI/CD pipelines.