Explore a comprehensive review of fascinating security vulnerabilities discovered in Android and iOS mobile applications through this 51-minute LASCON conference talk. Delve into anonymized findings from confidential reports, examine intriguing flaws in open-source apps with high security demands like password vaults and privacy browsers, and investigate security issues in government-mandated applications that garnered significant media attention. Gain actionable insights derived from real-world penetration testing of mobile apps, including examples from Smart Seriff and Chinese Police apps used for citizen information gathering. Broaden your mobile security knowledge with practical examples and expert analysis of various attack vectors in the mobile app ecosystem.