Android Overlay and Accessibility Features Leave Millions at Risk
Researchers warn two features, not flaws, in Android can be used together to open devices up to attack.
Tom Spring
About
Tom Spring is Editor-in-Chief of Threatpost. For the past two decades he has worked at a number of national publications in the roles of executive editor, technical editor and investigative reporter.
Subtitle Hack Leaves 200 Million Vulnerable to Remote Code Execution
Attackers can remotely execute code on targeted systems via specially crafted subtitle files for videos.
Google Elevates Security in Android O
Android O, due in the third quarter, figures to elevate the security of the mobile OS with new features focused on improved third-party patching, a new permission model and hardening of existing features.
The country’s top cybersecurity boss said the country is headed the wrong way when it comes to cybersecurity.
The Terror exploit kit has matured into a greater threat and carefully crafts attacks based on a user’s browser environment.
Google announces big changes for Android security including new features, a rebranding of old services and an updated UI, all streamlined under a new service called Google Play Protect.
The Senate’s use of the end-to-end encrypted messaging app Signal is a good first step in protecting U.S. democratic institutions, but much more needs to be protected.
Researchers claim that APT3, widely believed to be a China-based threat actor, is directly connected to the Chinese Ministry of State Security (MSS).
DocuSign warns of a breach and subsequent theft of email addresses that are part of a phishing campaign that employs malicious macro-laced Word documents.
Researchers at DefenseCode claim a vulnerability in Google’s Chrome browser allows hackers to steal credentials and launch SMB relay attacks.
