@CitizenSec , 05-11-2024
Google has reported a serious vulnerability in the Android operating system, which is actively used by hackers. This problem allows hackers to gain unauthorized access to important Android system folders. The vulnerability received the code CVE-2024-43093 and is associated with the Android Framework — this is the part of the system responsible for the operation of applications.
Although the exact details of the attacks are unknown, Google warns that they may be aimed at certain types of users. The company also points to another security issue with the CVE-2024-43047 code related to Qualcomm processors, which has already been fixed. This vulnerability could lead to failures in the device's memory.
Researchers from Google Project Zero were the first to discover these problems, and Amnesty International confirmed their active use in real attacks. There is no information yet on how and when these vulnerabilities began to be exploited, but it is assumed that they could have been part of sophisticated espionage attacks on civil society activists.
To protect yourself from these threats, it is important to keep an eye on security updates on your device. Install all Android system and app updates regularly through the official Google Play store. This will help close possible vulnerabilities and reduce the risk of attacks.
Experts have discovered two dangerous programs that seem harmless at first. These programs can steal personal data, monitor computer activity, and even take control of the system.
@CitizenSec
26-12-2024This vulnerability, known as SSRF (server-side request forgery), could allow attackers to gain access to confidential data.
@CitizenSec
09-09-2024Serious vulnerabilities have been discovered in AVTECH surveillance cameras, which malicious actors use to infect devices with malware.
@CitizenSec
05-09-2024Recently, security researcher John Blackburn from PatchStack discovered a serious vulnerability in the LiteSpeed Cache plugin, which is used to speed up WordPress sites.
@CitizenSec
28-08-2024Google has reported a security issue in its Chrome browser that has been fixed in the latest update.
@CitizenSec
27-08-2024A serious security vulnerability was recently discovered in OpenSSH on FreeBSD systems.
@CitizenSec
14-08-2024A critical vulnerability has been discovered in MongoDB, identified as CVE-2024-7553.
@CitizenSec
12-08-2024В конце марта в популярной библиотеке XZ Utils был обнаружен бэкдор, который получил идентификатор CVE-2024-3094.
@CitizenSec
16-07-2024Найдена серьезная уязвимость в маршрутизаторах D-LINK, которая может раскрыть конфиденциальную информацию, такую как пароли. Уязвимость была выявлена и представлена в виде доказательства концепции (PoC).
@CitizenSec
11-07-2024