When Frederick County, Maryland, reviewed a mobile app used by its fire and rescue team, it passed every traditional check. The app connected to an ultrasound device, looked legitimate and had been approved.
Binary-level analysis told a different story: the app was exposing protected health information, violating HIPAA in ways that no privacy label, MDM policy or ma...