#GoogleSecurityBulletin

Google Patches 25 Android Flaws, Including Critical Privilege Escalation Bug

by

July 2, 2024 at 11:18AM Google has released patches for 25 security vulnerabilities in the Android operating system, including a critical flaw in the Framework component. The CVE-2024-31320 bug affects Android versions 12 and 12L, allowing an attacker to escalate privileges. The updates address various high-severity issues and advise users to promptly update their devices. … Read more

Orca Flags Dangerous Google Kubernetes Engine Misconfiguration

by

January 24, 2024 at 11:18AM A misconfiguration in Google Kubernetes Engine (GKE) has allowed a security loophole, enabling attackers to access sensitive information and take over clusters. Cloud security startup Orca Security reported that the issue is due to privileges granted to the system:authenticated group. Approximately 250,000 GKE clusters were found exposed, with over 1,300 … Read more