Remaining broken links

_application-threats/APP-7.md

@@ -2,11 +2,11 @@
 layout: threat
 ThreatCategory: Vulnerable Applications
 ID: APP-7
-Threat: Data or Funcionality Exposed to Untrusted Apps
+Threat: Data or Functionality Exposed to Untrusted Apps
 ThreatDescription: Android apps can be designed to share data with other apps through a variety of mechanisms such as broadcast receivers, services, intents, and content providers. Some of these mechanisms permit the app developer to grant broader permissions to untrusted apps than intended. As a result, a malicious app may gain unauthorized access to sensitive functionality or data. The malicious app may further take advantage of the weak permission to exploit other vulnerabilities in the receiving app by sending it crafted input.
 ThreatOrigin:
 ExploitExample:
-  - eBay for Android Content Provider Injection Vulnerability [^75]
+  - 50 Ways to Leak Your Data: An Exploration of Apps’ Circumvention of the Android Permissions System [^75]
   - Smishing Vulnerability in Multiple Android Platforms [^76]
   - Android SMS Spoofer [^77]
   - Content provider permission bypass allows malicious application to access data [^78]

_authentication-threats/AUT-0.md

@@ -3,16 +3,10 @@ layout: threat
 ThreatCategory: 'Authentication: User or Device to Remote Service'
 ID: AUT-0
 Threat: Use of Stolen Credentials
-ThreatOrigin: 'Mobile Threat Protection: A Holistic Approach to Securing Mobile Data and Devices [^61]'
+ThreatOrigin: 'Mobile Threat Protection: A Holistic Approach to Securing Mobile Data and Devices [^61]
 ThreatDescription: Attackers able to steal authorized credentials could potentially login to sensitive services or devices, and gain unauthorized access to privileged information.
 ExploitExample:
-  - CBS App & Mobility Website [^116]
-  - The Fork [^117]
-  - Star Q8 [^118]
-  - Corriere Della Sera App [^119]
-  - LaTribune [^120]
-  - Card Crypt [^121]
-  - Starbucks Caught Storing Mobile Passwords in Clear Text [^122]
+  - How malware steals autofill data from browsers [^116]
 CVEExample:
 PossibleCountermeasures:
     Enterprise: