Custom search

Millions of Budget Smartphones With UNISOC Chips Vulnerable to Remote DoS Attacks

Millions of budget smartphones that use UNISOC chipsets can have their communications remotely disrupted by hackers due to a critical vulnerability.

ZDNet

Phishing attempts against smartphones are on the rise. And those small screens aren't helping | ZDNet

We use smartphones for almost everything - cyber criminals know this and are looking to exploit it.

ZDNet

Samsung Galaxy smartphones are getting this new security feature

Zero-click attacks don't need you to interact with them to hack your phone. Samsung Message Guard aims to stop them from getting through.

CyberNews

North Koreans hack their smartphones to evade state controls – report | CyberNews

The culture of hacking has taken root in one of the most isolated places on the planet.

DataBreaches

Beware! This Italian Spyware Is Hacking Apple iPhones And Android Smartphones

ABP News Bureau reports: Google has identified spyware and hacking tools owned by an Italian vendor that was used to spy on Apple iPhones and Android...

ThreatPost

Bluetooth Signals Can Be Used to Track Smartphones, Say Researchers

Researchers demonstrated a possible way to track individuals via Bluetooth signals.

The Hacker News

New BrutePrint Attack Lets Attackers Unlock Smartphones with Fingerprint Brute-Force

BrutePrint: A new attack technique targeting smartphone fingerprint authentication.

The Hacker News

Critical UNISOC Chip Vulnerability Affects Millions of Android Smartphones

Researchers have discovered a security flaw in UNISOC's smartphone chipset that can be used to disrupt smartphone radio communications.

CyberNews

Audio codec flaw left two-thirds of Android smartphones vulnerable to spying | CyberNews

Major chipset makers ported vulnerable code into their audio decoders.

ZDNet

Google warns: Android 'patch gap' is leaving these smartphones vulnerable to attack

Google says it is working with Android smartphone manufacturers to get them to release patches for multiple critical Arm Mali GPU driver bugs.

Ars Technica

Here’s how long it takes new BrutePrint attack to unlock 10 different smartphones

BrutePrint requires just $15 of equipment and a little amount of time with a phone.

ZDNet

Android security: Flaw in an audio codec left two-thirds of smartphones at risk of snooping, say researchers | ZDNet

Millions of Android phones were exposed to an easily exploitable flaw in an audio codec used in chips from MediaTek and Qualcomm.

Cyber Security News

Researchers Found that Bluetooth Devices Can Be Used to Track Location

Using Bluetooth signals generated by smartphones, security researchers at the University of California San Diego have developed a method of identifying and tracking them via their smartphones.

Infosecurity News

Counterfeit Android Devices Revealed to Contain Backdoor Designed to Hack WhatsApp

At least four different smartphones affected: ‘P48pro’, ‘radmi note 8’, ‘Note30u’ and ‘Mate40’

Infosecurity News

Malware-Infected Devices Sold Through Major Retailers

The BADBOX scheme deploys the Triada malware on various devices like smartphones and tablets

The Record

SpyNote malware spies on Android users, steals banking credentials

Hackers are increasingly using a new variant of SpyNote malware to secretly observe and modify infected Android smartphones.

CyberSecurity Dive

Behind the push to finally eliminate passwords

The FIDO Alliance is pushing for smartphones to become the authentication standard as the tech industry presses for new methods.

Cyber Security News

11 days ago

Antidot Mobile Malware As Google Play Update Hijacks Device Control

Cybersecurity experts have found a new banking Trojan horse for Android smartphones. It's called Antidot Mobile Malware.

SecurityWeek

5 months ago

'5Ghoul' Vulnerabilities Haunt Qualcomm, MediaTek 5G Modems

Researchers call attention to 14 security defects taht can be exploited to drop and freeze 5G connections on smartphones and routers.

DataBreaches

Re-Victimization from Police-Auctioned Cell Phones

Brian Krebs writes: Countless smartphones seized in arrests and searches by police forces across the United States are being auctioned online without first...

ZDNet

Smartphone malware is on the rise, here's what to watch out for | ZDNet

Cybersecurity researchers warn of a 500% surge in mobile cyberattacks as hackers try to steal passwords, bank details and even take full control of smartphones.

The Hacker News

1 month ago

Google Warns: Android Zero-Day Flaws in Pixel Phones Exploited by Forensic Companies

Google's Pixel smartphones under attack. Two new Android security flaws - CVE-2024-29745 & CVE-2024-29748 - uncovered, exploited in the wild.

Computerworld

10 months ago

Was Steve Jobs right about this?

Unesco report says smartphones should be banned from schools and digital tech should put humans first

Computerworld

The surveillance-as-a-service industry needs to be brought to heel

Yet another example of government surveillance affecting smartphones from Apple and Google has emerged. Enough, already!

The Hacker News

New Air-Gap Attack Uses MEMS Gyroscope Ultrasonic Covert Channel to Leak Data

Researchers have developed a new Air-Gap attack in which attackers can exfiltrate sensitive information from air-gapped computers to smartphones locat

Bleeping Computer

Samsung and Google fix Microsoft Intune Android 13 enrollment issue

Microsoft has confirmed today that Samsung and Google have fixed an Intune enrollment issue affecting Galaxy S22 smartphones running Android 13.

Bleeping Computer

4 months ago

Microsoft tests instant access to Android photos in Windows 11

Microsoft plans to provide Windows 11 users with almost instant access to photos and screenshots they've taken on their Android smartphones.

The Hacker News

This Cybercrime Syndicate Pre-Infected Over 8.9 Million Android Phones Worldwide

🚨 ALERT: Lemon Group, a cybercrime enterprise, has taken control of millions of pre-infected Android smartphones worldwide!

DataBreaches

Google Reveals Samsung Phones Could Be Hacked Without Owners Knowing: Here’s How

Dane Enerio reports: Google has warned that some of its smartphones running the company’s own Android operating system, as well as other devices from...

Bleeping Computer

Samsung confirms hackers stole Galaxy devices source code

Samsung Electronics confirmed on Monday that its network was breached and the hackers stole confidential information, including source code present in Galaxy smartphones.

Security Affairs

10 months ago

France’s government is giving the police more surveillance power

The French government is going to grant law enforcement the power to spy on suspects through smartphones and other devices. French legislators are going to approve a justice reform bill that also gives more power to law enforcement, allowing them to spy on suspects through their smartphones and other electronic devices. According to the French […]

The Hacker News

Samsung Confirms Data Breach After Hackers Leak Galaxy Source Code

Samsung confirms a security breach that led to the exposure of internal company data, including the source code related to its Galaxy smartphones.

Cyber Security News

6 Ways you can Proactively Secure Your organization's Mobile Endpoints

Mobile Endpoints: Over the years, mobile devices like smartphones, tablets, and laptops have been extensively used to get work done.

Bleeping Computer

Study reveals Android phones constantly snoop on their users

A new study by a team of university researchers in the UK has unveiled a host of privacy issues that arise from using Android smartphones.

The Hacker News

100 Million Samsung Galaxy Phones Affected with Flawed Hardware Encryption Feature

Researchers detail severe flaws in hardware-backed encryption on nearly 100 million Android-based Samsung Galaxy S8, S9, S10, S20 and S21 smartphones.

The Record

El Salvador journalists hacked with NSO's Pegasus spyware

The smartphones of dozens of journalists and activists from El Salvador have been hacked with a version of the Pegasus spyware.

Security Affairs

Researcher received a $70k award for a Google Pixel lock screen bypass

Google fixed a high-severity security bug affecting all Pixel smartphones that can allow attackers to unlock the devices. Google has addressed a high-severity security bug, tracked as CVE-2022-20465, affecting all Pixel smartphones that could be exploited to unlock the devices. The Google Pixel Lock Screen Bypass was reported by security researcher David Schütz that was […]

DarkReading

Hey, Siri: Hackers Can Control Smart Devices Using Inaudible Sounds

A technique, dubbed the "Near-Ultrasound Inaudible Trojan" (NUIT), allows an attacker to exploit smartphones and smart speakers over the Internet, using sounds undetectable by humans.

Bleeping Computer

7 months ago

Avast confirms it tagged Google app as malware on Android phones

Czech cybersecurity company Avast confirmed that its antivirus SDK has been flagging a Google Android app as malware on Huawei, Vivo, and Honor smartphones since Saturday.

The Cyber Wire

6 months ago

Ukraine at D+682: OSINT on morale, and a coming hacktivist shakeup.

Storms impede ground operations. Smartphones as intelligence sources (and as a security problem). Notes on hacktivist auxiliaries, both Russian and Ukrainian.

Bleeping Computer

Android phones are vulnerable to fingerprint brute-force attacks

Researchers at Tencent Labs and Zhejiang University have presented a new attack called 'BrutePrint,' which brute-forces fingerprints on modern smartphones to bypass user authentication and take control of the device.

Bleeping Computer

Real-time voice concealment algorithm blocks microphone spying

Columbia University researchers have developed a novel algorithm that can block rogue audio eavesdropping via microphones in smartphones, voice assistants, and IoTs in general.

Bleeping Computer

Inaudible ultrasound attack can stealthily control your phone, smart speaker

American university researchers have developed a novel attack which they named "Near-Ultrasound Inaudible Trojan" (NUIT) that can launch silent attacks against devices powered by voice assistants, like smartphones, smart speakers, and other IoTs.

The Record

EU proposes security standards for IoT products

European Union lawmakers introduced new security standards Thursday for internet-connected products — from smartphones to fridges — as the bloc attempts to address the growing threat posed by cyberattacks.

Bleeping Computer

Cybercrime gang pre-infects millions of Android devices with malware

A cybercriminal tracked as the "Lemon Group" has been infecting millions of Android-based smartphones, watches, TVs, and TV boxes, with a malware strain named 'Guerilla.'

Bleeping Computer

7 months ago

Huawei, Vivo phones tag Google app as TrojanSMS-PA malware

Huawei, Honor, and Vivo smartphones and tablets are displaying strange 'Security threat' alerts urging the deletion of the Google app, warning that it is detected as the 'TrojanSMS-PA' malware.

Latest Hacking News

Guerilla Malware Shipped With Roughly 9 Million Android Devices

Researchers have revealed the shipping of millions of Android devices pre-infected with Guerilla malware. The infected devices include smartphones, smart TVs, and even smartwatches. Lemon Group Pre-Infected Android Devices With Guerilla Malware According to a recent report

SecurityWeek

19 days ago

$2.5 Million Offered at Upcoming 'Matrix Cup' Chinese Hacking Contest

Chinese hacking contest Matrix Cup is offering rewards for exploits targeting OS, smartphones, enterprise software, and security products.

Bleeping Computer

Xiaomi phones with MediaTek chips vulnerable to forged payments

Security analysts have found weaknesses in the implementation of the trusted execution environment (TEE) in MediaTek-powered Xiaomi smartphones, which could enable third-party unprivileged apps to disable the payment system or forge payments.

Bleeping Computer

3 years ago

All Wi-Fi devices impacted by new FragAttacks vulnerabilities

Newly discovered Wi-Fi security vulnerabilities collectively known as FragAttacks (fragmentation and aggregation attacks) are impacting all Wi-Fi devices (including computers, smartphones, and smart devices) going back as far as 1997.

Cyber Security News

Xiaomi Phones with MediaTek Chips Found Vulnerable

CheckPoint researched the payment system built into Xiaomi smartphones powered by MediaTek chips. From the analysis, they identified vulnerabilities that can allow the forging of payment packages or disabling the payment system directly from an unprivileged Android application.

ZDNet

Follow this one simple rule for better phone security

Here's a bit of advice that Android users should consider to keep their smartphones and tablets as secure as possible.

DarkReading

11 months ago

Mobile Cyberattacks Soar, Especially Against Android Users

The number of malware samples is up as attackers aim to compromise users where they work and play: Their smartphones.

CyberNews

EU employee phones compromised with Pegasus spyware | Cybernews

The European Union found evidence that smartphones used by some of its staff were compromised by NSO Group’s Pegasus software.

Bleeping Computer

Android phone owner accidentally finds a way to bypass lock screen

Cybersecurity researcher David Schütz accidentally found a way to bypass the lock screen on his fully patched Google Pixel 6 and Pixel 5 smartphones, enabling anyone with physical access to the device to unlock it.

Latest Hacking News

Hackers Can Bypass Fingerprint Locks On Phones With BrutePrint Attack

While biometric locks usually seem a safe device locking method, researchers have now devised a viable bypass. Dubbed “BrutePrint” the new attack method allows an adversary to brute-force fingerprint to unlock target devices like smartphones. BrutePrint

Bleeping Computer

France demands Apple pull iPhone 12 due to high RF radiation levels

The Agence Nationale des Fréquences (ANFR) has asked Apple to withdraw iPhone 12 smartphones from the French market because the device emits radiofrequency energy that is beyond the limit permitted to be absorbed by the human body.

Latest Hacking News

EarSpy Attack Allows Android Snooping Via Ear Speaker Vibrations

Researchers have devised a new eavesdropping strategy that targets Android users. Dubbed “EarSpy,” the attack allows listening to speech by capturing ear speaker vibrations on Android smartphones. EarSpy Attack Spies On Android Phones Android phones have long

Computerworld

1 month ago

Enterprise buyer's guide: How to choose the right UEM platform

Unified endpoint management software lets IT manage all endpoint devices — smartphones, laptops, desktops, printers, IoT devices, and others — from a single management console. Here’s what to look for in a UEM platform and key vendors to consider.

Bleeping Computer

Five ways your data may be at risk — and what to do about it

We store vast amounts of data — financial records, photos/videos, family schedules, freelance projects and more — on our personal computers and smartphones. Let's take a look at some of the most common threats to your data, and how you can step up your protection today.

Bleeping Computer

New WiKI-Eve attack can steal numerical passwords over WiFi

A new attack dubbed 'WiKI-Eve' can intercept the cleartext transmissions of smartphones connected to modern WiFi routers and deduce individual numeric keystrokes at an accuracy rate of up to 90%, allowing numerical passwords to be stolen.

SecurityWeek

Device Exploits Earn Hackers Nearly $1 Million at Pwn2Own Toronto 2022

Pwn2Own Toronto 2022 has come to an end, with participants earning nearly $1 million for hacking smartphones, printers, routers, NAS devices, and smart speakers.

CSO

Data protection concerns spike as states get ready to outlaw abortion

The use of personal data from brokers, apps, smartphones, and browsers to identify those seeking an abortion raises new data protection and privacy risks.

Security Affairs

Pwn2Own Toronto 2022 Day 3: Participants earned nearly $1 million

On the third day of the Zero Day Initiative’s Pwn2Own Toronto 2022 hacking competition, participants earned more than $250,000. On the third day of the Zero Day Initiative’s Pwn2Own Toronto 2022 hacking competition, participants earned more than $250,000 for demonstrating zero-day attacks against NAS devices, printers, smart speakers, routers, and smartphones. In the two days, participants earned […]

Cyber Security News

Can Linux Be Installed On a Mac? - Cyber Security News

Linux operating system is the most common open source OS used on servers, smartphones, desktop and laptop computers, and other compatible devices. It can run on most major computer platforms like ARM, SPARC, and x86; and is rated highly by many in the tech industry. There are different versions of Linux OS and all of […]

Security Affairs

A flaw in Xiaomi phones using MediaTek Chips could allow to forge transactions

Flaws in Xiaomi Redmi Note 9T and Redmi Note 11 models could be exploited to disable the mobile payment mechanism and even forge transactions. Check Point researchers discovered the flaws while analyzing the payment system built into Xiaomi smartphones powered by MediaTek chips. Trusted execution environment (TEE) is an important component of mobile devices designed to process […]

Security Affairs

Samsung data breach: Lapsus$ gang stole Galaxy devices’ source code

Samsung confirmed that threat actors had access to the source code of its Galaxy smartphones in recent security breach. Samsung this week disclosed a data breach, threat actors had access to internal company data, including the source code of Galaxy models. Last week the Lapsus$ ransomware gang claimed to have stolen a huge trove of sensitive data […]

Infosecurity News

Air-Gap Attack Exploits Gyroscope Ultrasonic Covert Channel to Leak Data

Gairoscope is a covert ultrasonic channel that does not require a microphone on the receiving side

Trend Micro

Comprehensive Traceability for Android Supply-Chain Security

We discuss the importance of traceability in the world of mobile operating systems.

Cyber Security News

5 months ago

New 5Ghoul Attack Impacts 5G Devices From Popular Brands

Cybersecurity researchers from the following organizations recently discovered the new 5Ghoul attack that impacts the 5G devices

CyberNews

4 months ago

US warns China-made drones pose national security risks

FBI and CISA warn China-made drones pose security risks.

ZDNet

iPhone or Android slow or buggy? Do this one simple thing every week

The internet is packed with tips and tricks to enhance your smartphone's performance but the simplest solution often proves to be the most effective.

Ars Technica

1 month ago

TSMC “still assessing” chipmaking facilities after 7.4-magnitude quake hits Taiwan

TSMC makes most high-end chips for Apple, Nvidia, AMD, and others.

Bleeping Computer

CISA urges vendors to patch BrakTooth bugs after exploits release

Researchers have released public exploit code and a proof of concept tool to test Bluetooth devices against System-on-a-Chip (SoC) security bugs impacting multiple vendors, including Intel, Qualcomm, Texas Instruments, and Cypress.

DataBreaches

CISA urges vendors to patch BrakTooth bugs after exploits release

Sergiu Gatlan reports: Researchers have released public exploit code and a proof of concept tool to test Bluetooth devices against System-on-a-Chip (SoC)...

Infosecurity News

Mobile Devices See 466% Annual Increase in Zero-Day Attacks

Zimperium report warns of bugs, malware and misconfigurations

Cyber Security News

GhostTouch - A Remote Attack Against Touchscreens

The experts explained the attack scenario using the illustration design where the GhostTouch system consists of two components, a touch injector, and a phone locator. The touch injector is used to inject touch events into the touchscreen and includes a signal generator.

Security Affairs

Samsung announces Message Guard feature to neutralize zero-click attacks

Samsung introduces a new protection feature called Message Guard to protect users from zero-click malware attacks. Samsung announced the implementation of a new security feature called Message Guard that aims at protecting users from malicious code that can be installed via zero-click attacks. Zero-click exploits allow attackers to compromise the target device without any user interaction, for example, a […]

SecurityWeek

Meta Warns of Password Stealing Phone Apps

Meta warned Facebook users that they have been "exposed" to seemingly innocuous smartphone applications designed to steal passwords to the social network.

Bleeping Computer

3 years ago

Gigaset Android phones infected by malware via hacked update server

Owners of Gigaset Android phones have been repeatedly infected with malware since the end of March after threat actors compromised the vendor's update server in a supply-chain attack.

DataBreaches

Inside a cyberattack method that targets your cellphone

Tim Starks reports: A recent spree of “smishing” attacks points to what some experts anticipate will be a wider threat in the future. The technique, which...

Ars Technica

Qualcomm strikes new Apple deal on 5G chips

Extension signals that Apple can't perfect the technology for itself.

Trend Micro

This Week in Security News - February 25, 2022

Recent cyberattacks increasingly target open-source web servers, and US officials tell businesses to watch for potential ransomware attacks after Biden announces Russia sanctions

DataBreaches

Data Breach Rule for Health Apps Leaves Developers in the Dark

Christopher Brown reports: Makers of health apps are scrambling to understand the extent of their legal liability after a divided Federal Trade Commission...

SecurityWeek

Google Reveals Spyware Vendor's Use of Samsung Phone Zero-Day Exploits

Google has detailed an exploit chain believed to be used by a spyware vendor to target Samsung phones.

SecurityWeek

Researchers Extract Sounds From Still Images on Smartphone Cameras

Academic researchers devise a method of acoustic eavesdropping using still images captured with smartphone cameras.

ZDNet

Android security update fixes more than 80 security vulnerabilities - including four critical

Google's Android Security Bulletin for December 2022 protects against a number of vulnerabilities - including one that could allow attackers to exploit Bluetooth.

ThreatPost

Samsung Screwed Up Encryption on 100M Phones

'Serious flaws' in the way Samsung phones encrypt sensitive material, as revealed by academics from Tel Aviv U, are 'embarrassingly bad.'

Infosecurity News

UK to Place Security Requirements on App Developers and Store Operators

Under the proposals, all app stores would be required to commit to a new code of practice

SecurityWeek

7 months ago

Android Devices With Backdoored Firmware Found in US Schools

Tens of thousands of Android devices have been shipped to end-users with backdoored firmware, Human Security warns.

DataBreaches

Hacked Documents: How Iran Can Track and Control Protesters’ Phones

Sam Biddle and Murtaza Hussain report: As furious anti-government protests swept Iran, the authorities retaliated with both brute force and digital repression...

ThreatPost

Pegasus Spyware Infects U.S. State Department iPhones

It's unknown who's behind the cyberattacks against at least nine employees' iPhones, who are all involved in Ugandan diplomacy.

CSO

Dashlane launches integrated passkey support for password manager with new in-browser passkey solution

Dashlane's passkey support allows users to authenticate to their password vaults without a password.

Security Affairs

Android mobile devices from top vendors in China have pre-installed malware

Researchers reported that the top-of-the-line Android mobile devices sold in China are shipped with surveillance software. China is currently the country with the largest number of Android mobile devices, but a recent study conducted by researchers from the University of Edinburgh and the Trinity College of Dublin revealed that top-of-the-line Android devices sold in the […]

CyberScoop

Europol says it disabled FluBot botnet infecting 'huge' number of devices

Botnets have proven hard to permanently eradicate in the past, suggesting Europol's success disabling the FluBot malware could be fleeting.

Security Affairs

GAIROSCOPE attack allows to exfiltrate data from Air-Gapped systems via ultrasonic tones

GAIROSCOPE: An Israeli researcher demonstrated how to exfiltrate data from air-gapped systems using ultrasonic tones and smartphone gyroscopes. The popular researcher Mordechai Guri from the Ben-Gurion University of the Negev in Israel devise an attack technique, named GAIROSCOPE, to exfiltrate data from air-gapped systems using ultrasonic tones and smartphone gyroscopes. The attack requires that the […]

ZDNet

Fake versions of real smartphone apps are being used to spread malware. Here's how to stay safe | ZDNet

Many people look for free versions of apps which in reality need a subscription. Criminals are exploiting this to steal passwords, bank details and more.

ZDNet