#MobileSecurity

Android 15 Rolling Out With New Theft, Application Protection Features

by

October 16, 2024 at 12:37PM Google has launched Android 15, introducing enhanced security features aimed at improving device and sensitive application protection. The update focuses on safeguarding user data against theft and other vulnerabilities. **Meeting Takeaways:** 1. **Release Announcement**: Google has officially launched Android 15. 2. **Security Enhancements**: The new version includes improved security features … Read more

TrickMo Banking Trojan Can Now Capture Android PINs and Unlock Patterns

by

October 15, 2024 at 01:06PM New variants of the TrickMo Android banking trojan now include features to steal unlock patterns or PINs, allowing attacks even when devices are locked. These versions also improve evasion tactics and target a wide range of applications. Mobile banking malware attacks have increased by 29% from June 2023 to April … Read more

Over 200 malicious apps on Google Play downloaded millions of times

by

October 15, 2024 at 10:32AM In one year, over 200 malicious apps on Google Play were identified, amassing nearly eight million downloads. Key threats included Joker, Adware, and Facestealer. Despite Google’s security measures, malware continues to bypass detection. Users are advised to read reviews and verify app permissions to avoid infection. ### Meeting Takeaways on … Read more

Why Your Identity Is the Key to Modernizing Cybersecurity

by

October 14, 2024 at 10:05AM In today’s digital landscape, sophisticated threats from criminal organizations and nation-states challenge security. The traditional moat-and-castle framework is outdated, giving way to a zero-trust model emphasizing identity verification. With AI’s rise, a robust identity-centric approach is crucial for securing data and facilitating seamless, secure collaboration across organizations. **Meeting Takeaways:** 1. … Read more

About the security content of iOS 17.7 and iPadOS 17.7 – Apple Support

by

October 13, 2024 at 02:30PM Various security vulnerabilities affecting iOS 17.7 and iPadOS 17.7 have been addressed, including issues with state management, memory access, and user data privacy. Updates are available for multiple models, including iPhone XS and various iPad Pro, Air, and mini models to mitigate potential risks. ### Meeting Takeaways: Security Updates for … Read more

Qualcomm Urges OEMs to Patch Critical DSP and WLAN Flaws Amid Active Exploits

by

October 8, 2024 at 12:42AM Qualcomm has released security updates addressing around 20 vulnerabilities in proprietary and open-source components. Among them, CVE-2024-43047 is a high-severity user-after-free bug in the DSP Service, under active exploitation. CVE-2024-33066, a critical flaw in WLAN Resource Manager, has also been patched. The updates aim to mitigate potential targeted exploitation and … Read more

Apple Releases Critical iOS and iPadOS Updates to Fix VoiceOver Password Vulnerability

by

October 5, 2024 at 01:30AM Apple has released iOS and iPadOS updates addressing two security issues. One flaw could enable VoiceOver to read out a user’s passwords, impacting various iPhone and iPad models. Another vulnerability allowed capturing audio before the microphone indicator is on. Users are urged to update to iOS 18.0.1 and iPadOS 18.0.1 … Read more

Android 14 Adds New Security Features to Block 2G Exploits and Baseband Attacks

by

October 3, 2024 at 01:39PM Google has incorporated security measures in its latest Pixel devices to counter baseband security attacks, which can exploit vulnerabilities in modem firmware. Threats are real, as shown by a past attack on Samsung devices. Google has introduced features such as turning off 2G support and partnership initiatives to enhance cellular … Read more

Crypto Scam App Disguised as WalletConnect Steals $70K in Five-Month Campaign

by

September 28, 2024 at 06:24AM A malicious Android app discovered in the Google Play Store masqueraded as a legitimate WalletConnect protocol to deceive users and steal $70,000 in cryptocurrency. It achieved over 10,000 downloads through fake reviews and consistent branding, impacting over 150 users. The app prompted users to sign transactions, enabling attackers to drain … Read more

Victims lose $70k to one single wallet-draining app on Google’s Play Store

by

September 26, 2024 at 10:20AM A recent attack drained $70,000 from cryptocurrency wallets through a fraudulent app called WalletConnect on Google’s Play Store. The app, posing as the legitimate WalletConnect protocol, targeted web3 users and captured details of victims’ wallets, blockchain, and known addresses. Despite being removed five months later, the incident underlines the need … Read more