The details of the Android vulnerability that enables an attacker to create a malicious update to an APK file without breaking its cryptographic signature have become public but it appears as though Google will have a patch ready for the flaw by the time it’s fully disclosed early next month.
Researchers at Bluebox Security have discovered a vulnerability in the Android code base that would allow a hacker to write a malicious update for an Android application and not break the app’s cryptographic signature.
A vulnerability in Skype’s Android application could enable an attacker in possession of the phone to bypass the lockscreen.
General Martin Dempsey, Chairman of the Joint Chiefs of Staff, made clear yesterday in a speech to the Brookings Institution that the military, the government, and the private sector each has a role to play in hardening the country against cyberattacks.
A vulnerability in backup software installed on many LG Android devices could give an attacker root access to a device.
Researchers in Germany discovered a weakness in how iOS generates default passwords for mobile hotspots.
Last week BlackBerry released a security update resolving an escalation of privilege vulnerability that existed in “BlackBerry Protect” enabled devices running version 10.0.10.261 and earlier operating systems. The company claims that version 10.0.9.2743 is not affected and that they have found no evidence of attackers exploiting this vulnerability in the wild.
A convenience feature native to iOS combined with a directory of carrier-specific SSID preloaded onto iPhones could lead to some devices automatically connecting to rogue networks spoofing a legitimate Wi-Fi access point.
BlackBerry has issued security advisories warning of vulnerabilities in the Z10 smartphone and PlayBook tablet.
The top U.S. intelligence official addressed the recent revelations about the National Security Agency’s covert cell-phone and email data collection surveillance programs on Thursday, saying that the programs have been ongoing for years, are fully authorized under U.S. law and that the leaks regarding the programs are “reprehensible” and could endanger the country’s national security.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
