# NowSecure Labs

> Research sandbox and interactive explorations from NowSecure's mobile security team.

## Research

- [The Two-Second Ad Auction You Never See](https://labs.nowsecure.com/applovin/): A researcher figured out how to decrypt AppLovin's mobile ad-auction traffic. NowSecure measured the scale: apps with billions of downloads were using the SDK in our May 2026 snapshot, 2,732 of them across 1,404 publishers.
- [California's Data Brokers, Inside Your Phone](https://labs.nowsecure.com/cppa_analysis/): At least 41 of California's 566 registered data brokers show up in mobile apps, in a deliberately small NowSecure MARI sample of 6,612 apps. 24 actively run as SDKs; 17 appear only as URL strings.
- [Vercel Breach — Mobile Blast Radius](https://labs.nowsecure.com/vercel_breach_mobile/): When Context AI got phished, Vercel got breached, and the fallout landed in hundreds of mobile apps. What NowSecure MARI is seeing.