InfoSecBulletin Cybersecurity for mankind
Indian Computer Emergency Response Team (CERT-In) issued a high-severity alert for android devices on September 11, 2024 highlighting the vulnerabilities that affect Android versions 12, 12L, 13, and 14.
The advisory said, bad attacker could potentially exploit these vulnerabilities to gain access the sensitive information stored in the devices, even they are able to gain elevated privileges (admin-level control), or launch denial-of-service (DoS) attacks, which can disrupt or disable targeted devices.
B1ack’s Stash Releases 1 Million Credit Cards on a Deep Web Forum
Cisco Confirms
Salt Typhoon Exploited CVE-2018-0171 to Target U.S. Telecom Networks
AWS Key Hunter
Test this free automated tool to hunt for exposed AWS secrets
Check Point Flaw Used to Deploy ShadowPad and Ransomware
CVE-2024-12284
Citrix Issues Security Update for NetScaler Console
CISA and FBI ALERT
Ghost ransomware to breach organizations in 70 countries
Hacker chains multiple vulns to attack Palo Alto Firewall
150 Gov.t Portal affected
Black-Hat SEO Poisoning Indian “.gov.in, .ac.in” domain
CVE-2018-19410 Exposes 600 PRTG Instances in Bangladesh
Builder claims Rs 150 cr for data loss; AWS faces FIR In Bengaluru
What Causes These Vulnerabilities?
Vulnerabilities in the android ecosystem arise from various areas, including issues in the Android Framework, System, Google Play updates and hardware components from Qualcom, Arm and Unisoc. The remote key provisioning subcomponent in Google play updates is also identified as a potential attack entry point.
Hackers can exploit these weaknesses to bypass security, steal personal data, control devices remotely, or crash the system with necessary tasks (a DoS attack).
How Can You Protect Your Device?
CERT-in advises all Android users to stay alert and install security updates promptly. These updates, provided by manufactures like Samsung, Oneplus and Xaomi, aim to fix vulnerabilities and enhance device security against cyber threat.
Users should avoid installing untrusted apps, visiting unknown websites, and clicking on suspicious links until
the updates are available. Monitoring app permissions and being careful with personal data can help reduce risks.
By promptly applying these updates, users can protect their devices from these serious vulnerabilities and stay safe from cyber threats.
