InfoSecBulletin Cybersecurity for mankind
In its April 2025 security update, Google patched 62 vulnerabilities in Android, including two zero-days used in targeted attacks. Among the 62 fixed vulnerabilities, most are high-severity elevation of privilege flaws, and two are zero-day vulnerabilities that hackers can easily exploit.
CVE-2024-43197 is a critical privilege escalation flaw in the Linux kernel’s USB-audio driver for ALSA devices. Authorities in Serbia allegedly used this zero-day exploit, developed by the Israeli digital forensics firm Cellebrite, to unlock seized Android devices.
Russia detects first SuperCard malware attacks via NFC
Income Property Investments exposes 170,000+ Individuals record
ALERT (CVE: 2023-28771)
Zyxel Firewalls Under Attack via CVE-2023-28771 by 244 IPs
CISA Flags Active Exploits in Apple iOS and TP-Link Routers
10K Records Allegedly from Mac Cloud Provider’s Customers Leaked Online
Canada 2nd largest airlines “WestJet” investigates cyberattack disrupting internal systems
Paraguay 7.4 Million Citizen Records Leaked on Dark Web
High-Severity Flaw in HashiCorp Nomad Allows Privilege Escalation
SoftBank: Over 137,000 personal info leaked
Alert
Trend Micro Apex One Flaw Allow Attackers to Inject Malicious Code
The second zero-day vulnerability (CVE-2024-53150) in the Android Kernel is caused by an out-of-bound read issue. If exploited, it enables local attackers to access sensitive information on your phone without any user interaction.
Both zero-days, along with 60 other security flaws, have been fixed in recent security patches. Google’s Pixel devices will receive these updates first, while other Android manufacturers may take longer to implement them.
To ensure your Android phone is safe from hackers, install updates and security patches as soon as they are released.
While 62 vulnerabilities may seem high, they are flaws that have been discovered and fixed. It’s important to keep your phone updated, as hackers target those with outdated software, making it easier for them to exploit these issues.
Within Minute, RamiGPT To Escalate Privilege Gaining Root Access
