Android’s December 2024 Security Update Patches 14 Vulnerabilities

December 4, 2024 at 07:02AM Google released December 2024 security updates for Android, addressing 14 high-severity vulnerabilities, including a critical remote code execution flaw. The updates cover Android versions 12 through 15. Users are encouraged to update devices promptly, as no exploitation is reported. No security updates were included for Android Automotive OS and Wear … Read more

In Other News: TSA Wants New Cyber Rules, Scam Call Detection in Android, SIM Swappers Arrested

November 15, 2024 at 08:15AM The TSA is proposing new cybersecurity regulations for pipelines and railroads. Google has introduced scam call detection features for Android devices, and several SIM swappers have been arrested in the US. **Meeting Takeaways:** 1. **TSA Cyber Regulations**: The Transportation Security Administration (TSA) is proposing new cybersecurity rules specifically aimed at … Read more

Google backports fix for Pixel EoP flaw to other Android devices

September 4, 2024 at 11:22AM Google has issued the September 2024 Android security updates, addressing 34 vulnerabilities. Notably, CVE-2024-32896, a previously patched elevation of privilege flaw on Pixel devices, has been actively exploited. Based on the meeting notes, it appears that Google has released the September 2024 Android security updates to address 34 vulnerabilities. One … Read more

Google Confirms CVE-2024-32896 Exploited in the Wild, Releases Android Security Patch

September 4, 2024 at 10:12AM Google has released its monthly security updates for the Android operating system to address a high-severity vulnerability (CVE-2024-32896) related to privilege escalation in the Android Framework component. The vulnerability has been actively exploited and impacts the entire Android ecosystem. Users are advised to update their devices to protect against potential … Read more

Google splats device-hijacking exploited-in-the-wild Android kernel bug among others

August 6, 2024 at 02:32PM Google released 46 fixes for Android in its August security patch batch, addressing a high-severity Linux kernel flaw (CVE-2024-36971) with potential for remote code execution. The bug may already be exploited by spyware, highlighting the urgency of updating Android devices. Other high-severity vulnerabilities include a Qualcomm component flaw and 11 … Read more

Google Patches Exploited Pixel Vulnerabilities

April 3, 2024 at 06:24AM Google released patches for 28 Android vulnerabilities and 25 Pixel device bugs, including two actively exploited issues (CVE-2024-29745 and CVE-2024-29748). Notable among the flaws is CVE-2024-23704, a high-severity vulnerability in the System component. The update also addressed security issues in Qualcomm and MediaTek components and resolved bugs in Android Automotive … Read more

December Android updates fix critical zero-click RCE flaw

December 4, 2023 at 02:46PM Google’s December 2023 Android update fixes 85 vulnerabilities, including a critical zero-click RCE bug in the System component and other high-severity issues. The most severe flaw allows remote execution without privileges or user interaction. Two zero-days were previously patched in October. Updates are released in two sets, with rollout times … Read more