The Indian government urgently asked Samsung smartphone users to update their devices due to security vulnerabilities.
By infosecbulletin
/ Wednesday , January 22 2025
Fortinet customers must apply the latest updates, as almost 50,000 management interfaces remain vulnerable to the latest zero-day exploit. The...
Read More
By infosecbulletin
/ Tuesday , January 21 2025
Every day a lot of cyberattack happen around the world including ransomware, Malware attack, data breaches, website defacement and so...
Read More
By infosecbulletin
/ Tuesday , January 21 2025
Ubuntu 22.04 LTS users are advised to update their systems right away due to a crucial security patch from Canonical...
Read More
By infosecbulletin
/ Tuesday , January 21 2025
Attackers are pretending to be Ukraine's Computer Emergency Response Team (CERT-UA) using AnyDesk to access target computers. “Unidentified individuals are...
Read More
By infosecbulletin
/ Tuesday , January 21 2025
Oracle Critical Patch Update Pre-Release Announcement shares details about the upcoming update scheduled for January 21, 2025. Note that this...
Read More
By infosecbulletin
/ Tuesday , January 21 2025
OWASP has released its updated list of the top 10 vulnerabilities in smart contracts for 2025. This guide highlights the...
Read More
By infosecbulletin
/ Monday , January 20 2025
Security researchers have found several vulnerabilities in Azure DevOps that could enable attackers to inject CRLF queries and carry out...
Read More
By infosecbulletin
/ Monday , January 20 2025
Intel Corporation is a leading semiconductor chip manufacturer, employing at least 22 graduates from the Department of Applied Chemistry and...
Read More
By infosecbulletin
/ Sunday , January 19 2025
vpnMentor’s Research Team is monitoring the potential TikTok ban in the U.S., driven by national security and data privacy issues....
Read More
By infosecbulletin
/ Saturday , January 18 2025
MITRE launched D3FENDTM 1.0, a cybersecurity framework that provides a vocabulary and understanding of the cyber domain. D3FEND 1.0, funded...
Read More
CERT-In issued a warning about a threat to certain Samsung devices running on Android versions 11, 12, 13, and 14. These vulnerabilities could be exploited to gain unauthorized access to sensitive data on these devices.
CERT-In has categorized the risk as high. Attackers may use these vulnerabilities to bypass security measures, access confidential information, and run unauthorized code on targeted systems. The vulnerabilities could pose a threat to different parts of the Samsung ecosystem.
ALSO READ:
Samsung Smartphone Users at Risk of Hacking, Update Now to Protect Yourself
Detailed Analysis and Potential Consequences:
The government’s cybersecurity team found several problems. These include issues with access control in Knox features, flaws in facial recognition software, concerns with the AR Emoji app, errors in Knox security software, and vulnerabilities in different system components. The vulnerabilities also affect the softsimd library, the Smart Clip app, and contacts app. These vulnerabilities include incorrect data size verification, unvalidated user input, and hijacking of specific app interactions.
Samsung phones with Android versions 11, 12, 13, and 14 are at risk, including models like Samsung Galaxy S23 series, Galaxy Z Flip 5, and Galaxy Z Fold 5.
To reduce the dangers of these vulnerabilities, users are strongly advised to take the following measures:
1. Install security updates quickly.
2. Update your apps regularly.
3. Be careful when installing apps.
4. Be cautious when clicking on links.
This advisory is to protect Samsung users from security threats. It stresses the need for proactive measures to secure their devices.