NowSecure Labs Research sandbox and interactive explorations from NowSecure's mobile security team. https://labs.nowsecure.com/ 2026-05-18T00:00:00Z NowSecure https://www.nowsecure.com The Two-Second Ad Auction You Never See https://labs.nowsecure.com/applovin/ 2026-05-18T00:00:00Z 2026-05-17T00:00:00Z David Weinstein A researcher figured out how to decrypt AppLovin's mobile ad-auction traffic. NowSecure measured the scale: apps with billions of downloads were using the SDK in our May 2026 snapshot, 2,732 of them across 1,404 publishers. California's Data Brokers, Inside Your Phone https://labs.nowsecure.com/cppa_analysis/ 2026-04-22T00:00:00Z 2026-04-22T00:00:00Z NowSecure Research At least 41 of California's 566 registered data brokers show up in mobile apps, in a deliberately small NowSecure MARI sample of 6,612 apps. 24 actively run as SDKs; 17 appear only as URL strings. Vercel Breach — Mobile Blast Radius https://labs.nowsecure.com/vercel_breach_mobile/ 2026-04-22T00:00:00Z 2026-04-22T00:00:00Z NowSecure MARI When Context AI got phished, Vercel got breached, and the fallout landed in hundreds of mobile apps. What NowSecure MARI is seeing.