InfoSecBulletin Cybersecurity for mankind
Google has patched a “high-severity” vulnerability that may be “under limited, targeted exploitation” in Android devices.
Google issued an advisory stating that the bug, known as CVE-2024-36971, affects the Linux kernel. This kernel is a crucial part of an operating system, connecting the software to the computer’s hardware.
According to Google, a vulnerability lets hackers run code on the device from a distance. Google hasn’t given details about the attacks or the attackers.
Daily Cyber security update for 14.11. 2026
Huge European telecom leak exposes clients of Swedbank, SEB, airBaltic, and other companies
PHP2Shell attack exploited a Check Point 0-day to deploy malware
North Korean hackers steal more than $400 million using video images, FBI says
Microsoft’s November 2026 Patch Tuesday addresses 1,093 flaws, with Outlook zero-day
Barracuda ESG flaws exploited, gaining root access
Apple, SAP, and Ivanti Patch Critical flaws Affecting Messaging, Bluetooth, and Enterprise Systems
Jailbroken DeepSeek AI Agent Conducts Two-Week Cyberattack on European Telecom
Daily Cyber security update for 10.11. 2026
IBM fixes 208 API Connect vulnerabilities, 47 critical
In order for the exploit to work, the attacker must have system-level privileges, which are the highest level of access permissions.
Google’s August update fixed 47 flaws, including some in Arm, Imagination Technologies, MediaTek, and Qualcomm components. Most of these flaws were rated as “high severity.”
Clement Lecigne from Google’s Threat Analysis Group found a new Android zero-day. He usually reports on zero-day flaws used in espionage attacks.
Google researchers recently warned that zero-day exploits, which can compromise devices before their vulnerabilities are known, are increasingly being used by nation-state hackers and cybercriminals.
According to a report from Google in March, they found that there were 97 zero-day exploits in 2023, compared to 62 in 2022. This is a 50 percent increase. Out of these exploits, 48 were done by spies and 49 were done by hackers looking for financial gain.
