Monday , December 23 2024
mobile phone

CERT-In
Warning! Govt alerts Samsung users; here’s why

The Indian government urgently asked Samsung smartphone users to update their devices due to security vulnerabilities.

Critical PHP Zero-Day Vulnerability found in Craft CMS To Gain RCE

A major security flaw in Craft CMS, a popular PHP content management system, has been found, enabling unauthenticated remote code...
Read More
Critical PHP Zero-Day Vulnerability found in Craft CMS To Gain RCE

For US$2.6bn, Mastercard acquires threat intelligence firm Recorded Future

Mastercard has completed its acquisition of Recorded Future, an AI-based threat intelligence provider. Mastercard has acquired the company for $2.65...
Read More
For US$2.6bn, Mastercard acquires threat intelligence firm Recorded Future

Eight New ICS Advisories released by CISA

CISA has released eight advisories on vulnerabilities in Industrial Control Systems (ICS). These vulnerabilities affect essential software and hardware in...
Read More
Eight New ICS Advisories released by CISA

Authority Denies
Hacker claim ransomware attack on Indonesia’s state bank BRI

Bank Rakyat Indonesia (BRI), the largest state bank by assets, has assured customers that their data and funds are secure...
Read More
Authority Denies  Hacker claim ransomware attack on Indonesia’s state bank BRI

London-based company “Builder.ai” reportedly exposed 1.2 TB data

Cybersecurity researcher Jeremiah Fowler reported to Website Planet that he found a non-password-protected 1.2 TB dataset containing over 3 million...
Read More
London-based company “Builder.ai” reportedly exposed 1.2 TB data

(CVE-2024-12727, CVE-2024-12728, CVE-2024-12729)
Sophos resolved 3 critical vulnerabilities in Firewall

Sophos has fixed three separate security vulnerabilities in Sophos Firewall.  The vulnerabilities CVE-2024-12727, CVE-2024-12728, and CVE-2024-12729 present major risks, such...
Read More
(CVE-2024-12727, CVE-2024-12728, CVE-2024-12729)  Sophos resolved 3 critical vulnerabilities in Firewall

“Workshop on Cybersecurity Awareness and Needs Analysis” held at BBTA

A time-demanding workshop on "Cybersecurity Awareness and Needs Analysis" was held on Thursday (December 19) at Bangladesh Bank Training Academy...
Read More
“Workshop on Cybersecurity Awareness and Needs Analysis” held at BBTA

CVE-2023-48788
Kaspersky reveals active exploitation of Fortinet Vulnerability

Kaspersky's Global Emergency Response Team (GERT) found that attackers are exploiting a patched SQL injection vulnerability (CVE-2023-48788) in Fortinet FortiClient...
Read More
CVE-2023-48788  Kaspersky reveals active exploitation of Fortinet Vulnerability

U.S. Weighs Ban on Chinese-Made Router TP-Link: WSJ reports

The US government is considering banning a well-known brand of Chinese-made home internet routers TP-Link due to concerns that they...
Read More
U.S. Weighs Ban on Chinese-Made Router TP-Link:  WSJ reports

Daily Security Update Dated: 18.12.2024

Every day a lot of cyberattack happen around the world including ransomware, Malware attack, data breaches, website defacement and so...
Read More
Daily Security Update Dated: 18.12.2024

CERT-In issued a warning about a threat to certain Samsung devices running on Android versions 11, 12, 13, and 14. These vulnerabilities could be exploited to gain unauthorized access to sensitive data on these devices.

CERT-In has categorized the risk as high. Attackers may use these vulnerabilities to bypass security measures, access confidential information, and run unauthorized code on targeted systems. The vulnerabilities could pose a threat to different parts of the Samsung ecosystem.

ALSO READ:

Samsung Smartphone Users at Risk of Hacking, Update Now to Protect Yourself

Detailed Analysis and Potential Consequences:

The government’s cybersecurity team found several problems. These include issues with access control in Knox features, flaws in facial recognition software, concerns with the AR Emoji app, errors in Knox security software, and vulnerabilities in different system components. The vulnerabilities also affect the softsimd library, the Smart Clip app, and contacts app. These vulnerabilities include incorrect data size verification, unvalidated user input, and hijacking of specific app interactions.

Samsung phones with Android versions 11, 12, 13, and 14 are at risk, including models like Samsung Galaxy S23 series, Galaxy Z Flip 5, and Galaxy Z Fold 5.

To reduce the dangers of these vulnerabilities, users are strongly advised to take the following measures:

1. Install security updates quickly.
2. Update your apps regularly.
3. Be careful when installing apps.
4. Be cautious when clicking on links.

This advisory is to protect Samsung users from security threats. It stresses the need for proactive measures to secure their devices.

Check Also

Fortinet

CVE-2023-48788
Kaspersky reveals active exploitation of Fortinet Vulnerability

Kaspersky’s Global Emergency Response Team (GERT) found that attackers are exploiting a patched SQL injection …

Leave a Reply

Your email address will not be published. Required fields are marked *