Appknox

MAY 12, 2022

Google's Android applications are tagged with 'nutrition labels' based on the security practices and the data they collect from users to share with third parties. Internet and software giant Google recently recalibrated how it categorizes its Playstore apps.

Mobile 143

Mobile Internet Internet Software 143

Security Affairs

FEBRUARY 7, 2024

In September 2023, Citizen Lab and Google’s TAG revealed that the three recently patched Apple zero-days (CVE-2023-41993, CVE-2023-41991, CVE-2023-41992) were used to install Cytrox Predator spyware. The attacker also had an exploit chain to install Predator on Android devices in Egypt. reads the analysis published by Google TAG. “We

Spyware 99

Spyware Hacking Cybersecurity Risk 99

Malwarebytes

MAY 10, 2023

The basic principle of these tags is that anyone with the matching app and permissions on their device (usually a phone) contributes to find the last location where the tag was detected. The new features of the Find My Device network allow Android users to find more devices.

Ransomware 98

Ransomware 98

Dark Reading

MARCH 29, 2023

Google TAG researchers reveal two campaigns against iOS, Android, and Chrome users that demonstrate how the commercial surveillance market is thriving despite government-imposed limits.

Government 90

Government Spyware Surveillance Marketing 90

Security Affairs

JUNE 24, 2022

Google’s Threat Analysis Group (TAG) revealed that the Italian spyware vendor RCS Labs was supported by ISPs to spy on users. TAG researchers tracked more than 30 vendors selling exploits or surveillance capabilities to nation-state actors. ” reads the report published by Google. ” continues the analysis.

Surveillance 109

Surveillance Mobile Spyware Telecommunications 109

Security Affairs

MARCH 29, 2023

Google’s Threat Analysis Group (TAG) discovered several exploit chains targeting Android, iOS, and Chrome to install commercial spyware. Google’s Threat Analysis Group (TAG) shared details about two distinct campaigns which used several zero-day exploits against Android, iOS and Chrome.

Spyware 86

Spyware Surveillance Firmware Internet 86

Malwarebytes

DECEMBER 12, 2023

But both vulnerabilities were credited to Clément Lecigne of Google’s Threat Analysis Group (TAG). That vulnerability was reported by TAG’s Benoît Sevens and the formerly mentioned Clément Lecigne. We don’t just report on Android and iOS security—we provide it Cybersecurity risks should never spread beyond a headline.

Spyware 81

Spyware Risk Cybersecurity 81

The Hacker News

MAY 20, 2022

Google's Threat Analysis Group (TAG) on Thursday pointed fingers at a North Macedonian spyware developer named Cytrox for developing exploits against five zero-day (aka 0-day) flaws, four in Chrome and one in Android, to target Android users.

Spyware 97

Spyware 97

Bleeping Computer

JUNE 23, 2022

Google's Threat Analysis Group (TAG) revealed today that RCS Labs, an Italian spyware vendor, has received help from some Internet service providers (ISPs) to infect Android and iOS users in Italy and Kazakhstan with commercial surveillance tools. [.].

Spyware 98

Spyware Surveillance Internet Internet 98

The Hacker News

MARCH 29, 2023

A number of zero-day vulnerabilities that were addressed last year were exploited by commercial spyware vendors to target Android and iOS devices, Google's Threat Analysis Group (TAG) has revealed.

Spyware 87

Spyware 87

Security Affairs

JULY 8, 2023

Google released July security updates for Android that addressed tens of vulnerabilities, including three actively exploited flaws. July security updates for Android addressed more than 40 vulnerabilities, including three flaws that were actively exploited in targeted attacks. ” reads the security bulletin.

Spyware 95

Spyware Hacking Mobile Information Security 95

CSO Magazine

MARCH 31, 2023

Several commercial spyware vendors developed and used zero-day exploits against iOS and Android users last year. However, their exploit chains also relied on known vulnerabilities to work, highlighting the importance of both users and device manufacturers to speed up the adoption of security patches.

Spyware 117

Spyware Mobile Surveillance Manufacturing 117

Heimadal Security

JUNE 24, 2022

For many years, Google has been monitoring the activity of commercial spyware sellers and in conjunction with Google’s Project Zero, discovered the fact that RCS Labs, an Italian vendor, utilizes unusual drive-by downloads as first infection vectors to target iOS and Android mobile users. What Happened?

Spyware 110

Spyware Mobile Cybersecurity 110

The Hacker News

JULY 19, 2022

Russian threat actors capitalized on the ongoing conflict against Ukraine to distribute Android malware camouflaged as an app for pro-Ukrainian hacktivists to launch distributed denial-of-service (DDoS) attacks against Russian sites.

DDOS 93

DDOS Malware 93

Security Affairs

AUGUST 28, 2022

Leaked documents show the surveillance firm Intellexa offering exploits for iOS and Android devices for $8 Million. The leaked documentation demonstrates that the company offers services for remote data extraction from Android and iOS devices. The exploits should work against the Android 12 update and iOS 15.4.1,

Surveillance 129

Surveillance Spyware Mobile Hacking 129

Dark Reading

MAY 23, 2022

An analysis from Google TAG shows that Android zero-day exploits were packaged and sold for state-backed surveillance.

Government 89

Government Surveillance 89

Krebs on Security

APRIL 15, 2024

“I use Android, which has a pretty simple workflow for downloading and decompiling the APK apps,” Brown told KrebsOnSecurity. “Given that I am pretty picky about what I trust on my devices, I downloaded Chirp and after decompiling, found that they were storing passwords and private key strings in a file.”

Software 277

Software Mobile Marketing Engineering 277

Threatpost

AUGUST 5, 2019

Buffer overflows, race conditions, use-after-free and more account for more than half of all vulnerabilities in the Android platform.

Accountability 57

Accountability Mobile 57

Security Affairs

SEPTEMBER 22, 2023

Citizen Lab and Google’s TAG revealed that the three recently patched Apple zero-days were used to install Cytrox Predator spyware. citizenlab in coordination with @Google ’s TAG team found that former Egyptian MP Ahmed Eltantawy was targeted with Cytrox’s #Predator #spyware through links sent via SMS and WhatsApp. .

Spyware 103

Spyware Surveillance Mobile Hacking 103

Malwarebytes

MAY 6, 2023

The basic principle of these tags is that anyone with the matching app and permissions on their device (usually a phone) contributes to find the last location where the tag was detected. The alliance between the two tech giants ensures that this can be done from Android phones and iPhones. Get a free trial below.

Manufacturing 95

Manufacturing Technology Ransomware 95

Security Affairs

JUNE 7, 2023

June 2023 security update for Android released by Google fixes about fifty flaws, including an Arm Mali GPU bug exploited by surveillance firms in their spyware. The June 2023 Android Security Bulletin provides details about the fix for more than fifty vulnerabilities affecting Android devices.

Spyware 85

Spyware Surveillance Firmware Hacking 85

Google Security

JUNE 30, 2020

Posted by Platform Hardening Team In Android 11 we continue to increase the security of the Android platform. Initializing memory We’ve enabled forms of automatic memory initialization in both Android 11’s userspace and the Linux kernel. Userspace HWASAN is supported since Android 10.

Software 76

Software DNS Media 76

Malwarebytes

NOVEMBER 1, 2022

A family of malicious apps from developer Mobile apps Group are listed on Google Play and infected with Android/Trojan.HiddenAds.BTGTHB. Older versions of these apps have been detected in the past as different variants of Android/Trojan.HiddenAds. The first important datapoint of the log entry is what LogCat calls the Tag.

Phishing 93

Phishing Malware Mobile Adware 93

Schneier on Security

SEPTEMBER 3, 2019

Earlier this year Google's Threat Analysis Group (TAG) discovered a small collection of hacked websites. TAG was able to collect five separate, complete and unique iPhone exploit chains, covering almost every version from iOS 10 through to the latest version of iOS 12. The vulnerabilities were patched in iOS 12.1.4,

Hacking 227

Hacking Surveillance Malware Government 227

Security Affairs

JULY 30, 2023

The popular Threat Analysis Group (TAG) Maddie Stone wrote Google’s fourth annual year-in-review of zero-day flaws exploited in-the-wild [ 2021 , 2020 , 2019 ], it is built off of the mid-year 2022 review. ” reads the report published by Google TAG. In 2021 the number of zero-days discovered by the researchers were 69 detected.

Firewall 86

Firewall Software Hacking Internet 86

Google Security

NOVEMBER 7, 2023

to develop Memory Tagging Extension (MTE) technology. MTE is now available on some OEM devices (as noted in a recent blog post by Project Zero) with Android 14 as a developer option, enabling developers to use MTE to discover memory safety issues in their application easily.

Software 78

Software Technology Architecture Mobile 78

CyberSecurity Insiders

NOVEMBER 8, 2021

And Douyin, a successor to the above stated Chinese short video app is also tagged as a global hit, as it has found a second place in the list with over 55.8 In another report compiled by Appthority, the following 10 android apps were blacklisted by most companies last year- Poot-debug(W100).apk,

Data privacy 117

Data privacy Internet Internet Cybersecurity 117

CyberSecurity Insiders

APRIL 24, 2022

Apple’s Audio Codec that was developed in 2004 and made as open source software since 2011 is reportedly filled with severe security vulnerabilities that could trigger panic among Android users. Reports are in that Apple has been improving the proprietary version of Codec from time to time and so no worries to its users.

Manufacturing 92

Manufacturing Software Cyber Attacks Media 92

Google Security

DECEMBER 17, 2021

Based on findings in our ongoing investigations, here is our list of product and service updates as of December 17th ( CVE-2021-44228 & CVE-2021-45046 ): Android is not aware of any impact to the Android Platform or Enterprise. YouTube is not using versions of Log4j affected by the vulnerability.

Marketing 95

Marketing 95

Security Affairs

JANUARY 12, 2021

Google Project Zero researchers uncovered a sophisticated hacking campaign that targeted Windows and Android users. While partnering with the Google Threat Analysis Group (TAG), the experts discovered a watering hole attack in Q1 2020 that was carried out by a highly sophisticated actor.

Hacking 105

Hacking Engineering Malware Information Security 105

Threatpost

JUNE 3, 2019

Researchers use malicious NFC tags and booby-trapped physical surfaces to connect Android devices to malicious wireless networks.

Wireless 76

Wireless Mobile Hacking 76

Security Affairs

FEBRUARY 25, 2024

Iran Crisis Russia-Aligned TAG-70 Targets European Government and Military Mail Servers in New Espionage Campaign U.S.

Spyware 93

Spyware Cyber Insurance Hacking Advertising 93

Security Boulevard

DECEMBER 12, 2023

SAP Security Note #3350297 , tagged with a CVSS score of 9.1, The New HotNews Note in Detail SAP Security Note #3411067 , tagged with a CVSS score of 9.1, High Priority SAP Security Notes SAP Security Notes #3394567 , tagged with a CVSS score of 8.1, SAP Security Notes #3382353 , tagged with a CVSS score of 7.5,

Passwords 52

Passwords Technology Mobile Government 52

Security Affairs

MAY 29, 2023

Cisco Talos and the Citizen Lab researchers have published a technical analysis of the powerful Android spyware Predator. Security researchers at Cisco Talos and the Citizen Lab have shared technical details about a commercial Android spyware named Predator that is sold by the surveillance firm Intellexa (formerly known as Cytrox).

Spyware 91

Spyware Surveillance Media Malware 91

Security Affairs

APRIL 1, 2023

Google TAG shared indicators of compromise (IoCs) for both campaigns. The experts pointed out that both campaigns were limited and highly targeted. The threat actors behind the attacks used both zero-day and n-day exploits in their exploits. The threat actors behind the attacks used both zero-day and n-day exploits in their exploits.

Spyware 80

Spyware Surveillance Mobile Education 80

Security Affairs

JUNE 6, 2019

for Windows, Mac, Linux, and Android. for Windows, Mac, Linux, and Android, the new version of the popular anonymizing browser. for Windows, Mac, Linux, and Android appeared first on Security Affairs. A new version of the popular Tor Browser was released by the Tor Project, it is Tor Browser 8.5.1 Pierluigi Paganini.

Advertising 83

Advertising Mobile Information Security 83

Hacker's King

JUNE 29, 2023

and Android beta version 2.23.12.13. Important: We have used an Android smartphone to demonstrate the steps. The image will be sent to the chat with an HD tag. This is how you can send HD Photos on WhatsApp for Android and iPhone. Also, the feature is rolling out gradually to the WhatsApp Beta.

Media 52

Media 52