Security and Privacy Issues Found in Popular Travel Apps

Zimperium reviewed 30 leading travel mobile apps and found pervasive security and privacy deficiencies: 100% of iOS apps and most Android apps failed security/privacy grades, iOS apps universally contained methods to override SSL/TLS chain validation, many apps allowed screenshots or excessive location/contact access, and Android apps frequently enabled Java object injection, WebView JavaScript execution, insecure content providers, and mechanisms to install unvetted code — issues that can expose credentials, personal data, and enable code injection or man-in-the-middle interception, posing meaningful risk to users and organizations.