THN Cybersecurity Recap: Last Week’s Top Threats and Trends (September 23-29)

September 30, 2024 at 09:36AM Last week in cybersecurity, CUPS vulnerabilities threatened remote attacks, while Rust’s adoption by Google reduced Android vulnerabilities. However, Kaspersky’s exit from the US market left users with uncertainties. Kia cars faced hijacking threats via license plates. The US sanctioned cryptocurrency exchanges, charged Iranian hackers, and detailed mysterious internet noise storms. … Read more

Memory-Safe Code Adoption Has Made Android Safer

September 26, 2024 at 05:19PM The number of memory-related vulnerabilities in Android has significantly decreased over the past five years, attributed to Google’s use of memory-safe languages like Rust. Memory safety issues now only account for 24% of all Android vulnerabilities, down from 76% in 2019. This shift has been credited to Google’s secure-by-design approach … Read more

Google sees 68% drop in Android memory safety flaws over 5 years

September 25, 2024 at 03:34PM The shift in Android vulnerabilities caused by memory safety issues from 76% in 2019 to 24% in 2024 highlights Google’s adoption of memory-safe languages like Rust. This strategy retains older code with minimal changes focused on security fixes, while prioritizing new code in memory-safe languages. Google emphasizes proactive prevention over … Read more

DARPA Aims to Ditch C Code, Move to Rust

August 13, 2024 at 08:41AM DARPA plans to fund a project called TRACTOR, aiming to develop an automated translator to convert old C code to Rust. The initiative seeks to address memory-safety vulnerabilities and reduce the labor and cost of rewriting code. The project aims to create high-quality Rust code and is expected to face … Read more

White House urges devs to switch to memory-safe programming languages

February 26, 2024 at 04:39PM The White House ONCD urges tech companies to adopt memory-safe programming languages like Rust to enhance software security by reducing memory safety vulnerabilities. Such vulnerabilities can lead to security risks and unauthorized access to data, posing a threat to the digital ecosystem. This initiative aligns with President Biden’s National Cybersecurity … Read more

Rust can help make software secure – but it’s no cure-all

February 8, 2024 at 02:34AM Memory-safety flaws are the primary high-severity issues for Google and Microsoft. However, they are not the top exploited vulnerabilities. Rust can reduce these flaws but not eliminate all risks, as highlighted by Horizon3.ai. While Rust prevents certain vulnerabilities, attention to complex software risks and security processes is crucial. Based on … Read more

FBI Takes Down BlackCat Ransomware, Releases Free Decryption Tool

December 19, 2023 at 11:45AM The U.S. Justice Department disrupted the BlackCat ransomware, issuing a decryption tool for victims. With FBI’s help, a confidential source breached the gang’s web panel. BlackCat, a major ransomware variant, operated a ransomware-as-a-service model and used double extortion. The action saved victims $68 million, dismantled the gang’s computer network, and … Read more

Google Using Clang Sanitizers to Protect Android Against Cellular Baseband Vulnerabilities

December 13, 2023 at 09:12AM Google is promoting the use of Clang sanitizers for enhancing the security of Android’s cellular baseband. The sanitizers, such as IntSan and BoundSan, help detect vulnerabilities and prevent remote code execution. Despite performance overhead, Google has enabled them in critical attack surfaces. The move complements the transition to memory-safe languages … Read more