Mobile Apps: The New API Battleground

The Zimperium 2025 mobile threat summary highlights pervasive API and mobile app security weaknesses: nearly half of apps contain hardcoded secrets, many Android and iOS apps lack reverse-engineering protections, a substantial portion leak sensitive data, some devices are rooted/jailbroken, and finance/travel apps remain vulnerable to man-in-the-middle attacks — recommending app-level API hardening and device attestation to mitigate exploitation.