Google Warns of Pixel Firmware Zero-Day Under Limited, Targeted Exploitation

June 12, 2024 at 02:17PM Google released a significant Pixel security update addressing a zero-day vulnerability CVE-2024-32896 exploited in the wild. The update addresses 44 Pixel-specific vulnerabilities, including seven critical bugs. It also fixes issues in Qualcomm components. Additionally, a separate actively exploited Arm Mali GPU Kernel Driver flaw, tagged as CVE-2024-4610, has been highlighted. … Read more

Pixel Phone Zero-Days Exploited by Forensic Firms

April 4, 2024 at 08:30AM Google’s April 2024 security update for Pixel phones addresses two zero-day vulnerabilities, CVE-2024-29745 and CVE-2024-29748, which forensic firms are exploiting to access device data. GrapheneOS, a privacy and security-focused mobile platform, urges additional mitigations. These include a partial fix from Google, but GrapheneOS proposes further measures such as auto-reboots and … Read more