In its April 2025 security update, Google patched 62 vulnerabilities in Android, including two zero-days used in targeted attacks. Among the 62 fixed vulnerabilities, most are high-severity elevation of privilege flaws, and two are zero-day vulnerabilities that hackers can easily exploit.
CVE-2024-43197 is a critical privilege escalation flaw in the Linux kernel’s USB-audio driver for ALSA devices. Authorities in Serbia allegedly used this zero-day exploit, developed by the Israeli digital forensics firm Cellebrite, to unlock seized Android devices.
By infosecbulletin
/ Wednesday , April 16 2025
On April 15, 2025, Oracle released a Critical Patch Update for 378 flaws for its products. The patch update covers...
Read More
By infosecbulletin
/ Wednesday , April 16 2025
Check Point Research warns of the active exploitation of a new vulnerability, CVE-2025-24054, which lets hackers leak NTLMv2-SSP hashes using...
Read More
By infosecbulletin
/ Wednesday , April 16 2025
Bengaluru's Whiteboard Technologies Pvt Ltd was hit by a ransomware attack, with hackers demanding a ransom of up to $70,000...
Read More
By infosecbulletin
/ Wednesday , April 16 2025
MITRE Vice President Yosry Barsoum warned that U.S. government funding for the Common Vulnerabilities and Exposures (CVE) and Common Weakness...
Read More
By infosecbulletin
/ Wednesday , April 16 2025
PwC has ceased operations in more than a dozen countries that its global bosses have deemed too small, risky or...
Read More
By infosecbulletin
/ Wednesday , April 16 2025
The Australian Cyber Security Centre (ACSC) has alerted technical users in both private and public sectors about ongoing exploitation of...
Read More
By infosecbulletin
/ Tuesday , April 15 2025
Cybersecurity platform ANY.RUN recently reported the top 10 malware threats of the week, highlighting a surge in activity for information...
Read More
By infosecbulletin
/ Monday , April 14 2025
In late March, TeamT5 found that a China-linked APT group exploited a critical vulnerability in Ivanti Connect Secure VPN appliances,...
Read More
By infosecbulletin
/ Monday , April 14 2025
A threat actor is reportedly advertised to sell a zero-day exploit for Fortinet's FortiGate firewalls on a dark web forum....
Read More
By infosecbulletin
/ Saturday , April 12 2025
BlackHat Asia-2025 was held for four days at the Marina Bay Convention Center in Singapore in early April. Infosecbulletin covered...
Read More
The second zero-day vulnerability (CVE-2024-53150) in the Android Kernel is caused by an out-of-bound read issue. If exploited, it enables local attackers to access sensitive information on your phone without any user interaction.
Both zero-days, along with 60 other security flaws, have been fixed in recent security patches. Google’s Pixel devices will receive these updates first, while other Android manufacturers may take longer to implement them.
To ensure your Android phone is safe from hackers, install updates and security patches as soon as they are released.
While 62 vulnerabilities may seem high, they are flaws that have been discovered and fixed. It’s important to keep your phone updated, as hackers target those with outdated software, making it easier for them to exploit these issues.
Within Minute, RamiGPT To Escalate Privilege Gaining Root Access