InfoSecBulletin Cybersecurity for mankind
Google has patched a “high-severity” vulnerability that may be “under limited, targeted exploitation” in Android devices.
Google issued an advisory stating that the bug, known as CVE-2024-36971, affects the Linux kernel. This kernel is a crucial part of an operating system, connecting the software to the computer’s hardware.
According to Google, a vulnerability lets hackers run code on the device from a distance. Google hasn’t given details about the attacks or the attackers.
WhatsApp banned on all US House of Representatives devices
Kaspersky found “SparkKitty” Malware on Google Play, Apple App Store
OWASP AI Testing Guide Launched to Uncover Vulns in AI Systems
Axentec Launches Bangladesh’s First Locally Hosted Tier-4 Cloud Platform
Hackers Bypass Gmail MFA With App-Specific Password Reuse
Russia detects first SuperCard malware attacks via NFC
Income Property Investments exposes 170,000+ Individuals record
ALERT (CVE: 2023-28771)
Zyxel Firewalls Under Attack via CVE-2023-28771 by 244 IPs
CISA Flags Active Exploits in Apple iOS and TP-Link Routers
10K Records Allegedly from Mac Cloud Provider’s Customers Leaked Online
In order for the exploit to work, the attacker must have system-level privileges, which are the highest level of access permissions.
Google’s August update fixed 47 flaws, including some in Arm, Imagination Technologies, MediaTek, and Qualcomm components. Most of these flaws were rated as “high severity.”
Clement Lecigne from Google’s Threat Analysis Group found a new Android zero-day. He usually reports on zero-day flaws used in espionage attacks.
Google researchers recently warned that zero-day exploits, which can compromise devices before their vulnerabilities are known, are increasingly being used by nation-state hackers and cybercriminals.
According to a report from Google in March, they found that there were 97 zero-day exploits in 2023, compared to 62 in 2022. This is a 50 percent increase. Out of these exploits, 48 were done by spies and 49 were done by hackers looking for financial gain.
