Google Patches 25 Android Flaws, Including Critical Privilege Escalation Bug

Google ships an Android security update with fixes for 15 vulnerabilities, including a critical-severity flaw in Framework.
The post Google Patches 25 Android Flaws, Including Critical Privilege Escalation Bug appeared first on SecurityWeek.
Continue reading Google Patches 25 Android Flaws, Including Critical Privilege Escalation Bug

Google Warns of Pixel Firmware Zero-Day Under Limited, Targeted Exploitation

The zero-day is tagged as CVE-2024-32896 and described as an elevation of privilege issue in Pixel Firmware.
The post Google Warns of Pixel Firmware Zero-Day Under Limited, Targeted Exploitation appeared first on SecurityWeek.
Continue reading Google Warns of Pixel Firmware Zero-Day Under Limited, Targeted Exploitation

Microsoft Warns of ‘Dirty Stream’ Vulnerability in Popular Android Apps

Microsoft has uncovered a new type of attack called Dirty Stream that impacted Android apps with billions of installations. 
The post Microsoft Warns of ‘Dirty Stream’ Vulnerability in Popular Android Apps appeared first on SecurityWeek.
Continue reading Microsoft Warns of ‘Dirty Stream’ Vulnerability in Popular Android Apps

Google Boosts Bug Bounty Payouts Tenfold in Mobile App Security Push

Researchers can earn as much as $450,000 for a single vulnerability report as Google boosts its mobile vulnerability rewards program.
The post Google Boosts Bug Bounty Payouts Tenfold in Mobile App Security Push appeared first on SecurityWeek.
Continue reading Google Boosts Bug Bounty Payouts Tenfold in Mobile App Security Push

Wpeeper Android Trojan Uses Compromised WordPress Sites to Shield Command-and-Control Server

The new Wpeeper Android trojan ceased operations after a week and has zero detections in VirusTotal.
The post Wpeeper Android Trojan Uses Compromised WordPress Sites to Shield Command-and-Control Server appeared first on SecurityWeek.
Continue reading Wpeeper Android Trojan Uses Compromised WordPress Sites to Shield Command-and-Control Server

FCC Fines Wireless Carriers for Sharing User Locations Without Consent

The Federal Communications Commission leveraged nearly $200 million in fines against wireless carriers AT&T, Sprint, T-Mobile and Verizon for illegally sharing customers’ location data.
The post FCC Fines Wireless Carriers for Sharing User Locatio… Continue reading FCC Fines Wireless Carriers for Sharing User Locations Without Consent