The Power of App Vetting: The First Line of Defense Against Enterprise Intruders

Executive summary: This advisory from Zimperium outlines the security risks posed by third-party applications in enterprise environments—highlighting vectors such as hardcoded secrets, unsecured tokens, misconfigurations, exposed logs, and excessive permissions—and presents vetting findings showing non-trivial rates of sensitive information exposure (several percent), 3% classified as malicious, and 8% as potentially unwanted programs (PUPs). It recommends comprehensive vendor security assessments and closed-loop vetting processes to isolate and protect sensitive data before deployment.