article thumbnail

Weekly Vulnerability Recap – Sept. 11, 2023 – Android Update Fixes 33 Vulnerabilities

eSecurity Planet

Attackers target certain administrative API functions on these devices using specially crafted input. The fix: ASUS released firmware updates to address the vulnerabilities. The problem: The zero-day vulnerabilities were actively exploited in attacks against iPhone and Mac users.

VPN 109
article thumbnail

Advanced threat predictions for 2023

SecureList

In 2022, the GReAT team tracked several threat actors leveraging SilentBreak’s toolset as well as a commercial Android spyware we named MagicKarakurt. In both cases, we described new UEFI firmware bootkits that managed to propagate malicious components from the deepest layers of the machine up to Windows’ user-land.

Firmware 106