The AI Threat Multiplier: Securing Mobile Apps in the Automated Era - ASW #400

While agents and LLMs haven't fundamentally changed core mobile vulnerability types, they have supercharged speed, scale, and accessibility—democratizing threats like automated phishing, synthetic identity fraud, and easier identification of hard-coded secrets. Ryan Lloyd and Jason Cortlund break down how threat actors leverage LLMs as a force multiplier to accelerate mobile app attacks. Then we discuss actionable defense strategies, from viewing agents as an active adversary to leveraging server-side threat telemetry, attestation, and layered defense strategies combined with polymorphic code releases. This segment is sponsored by Guardsquare. Visit https://securityweekly.com/guardsquare to learn more about them! Visit https://www.securityweekly.com/asw for all the latest episodes! Show Notes: https://securityweekly.com/asw-400 00:00:00 Welcome to ASW #400: The AI Threat Multiplier 00:01:32 Introducing GuardSquare Experts Ryan Lloyd and Jason Cortlund 00:02:14 Understanding Mobile App Threats in the AI Era 00:08:19 AI Democratizes Mobile App Attacks and Exposes Secrets 00:12:11 AI's Role in Exposing Hard-Coded Secrets in Mobile Apps 00:16:50 Analyzing Malware: LLM-Generated and AI-Assisted Attacks 00:19:34 Mitigation Strategies for AI-Enhanced Mobile App Attacks 00:22:30 Leveraging Server-Side Telemetry and Attestation for Security 00:26:50 The Changing Landscape of Bug Bounties with AI 00:31:11 The Role of Open Source in Mobile App Security Ecosystems 00:38:13 Emerging Mobile Threats: Digital Identity and Deepfake Attacks 00:43:36 The Shared Responsibility of Mobile Security: OS and Device Vendors 00:46:58 Jason and Ryan Describe Application Security in Three Words 00:51:05 Thank You to Guests and Listeners, Subscribe for More