#android-security
#android-security
[ follow ]
fromZDNET
1 week agoYou should update your Samsung phone ASAP - this zero-day flaw just got patched
Samsung recently issued a patch to resolve a critical vulnerability impacting its Android smartphone users. All impacted phone models will receive the fix, which patches a vulnerability tracked as . The security flaw, issued a critical base score of 8.8 by Samsung Mobile (a CNA), is described as an "out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code."
Gadgets
fromZDNET
1 week agoUpdate your Samsung phone ASAP to patch this zero-day flaw exploited in the wild
Samsung has issued a patch to resolve a critical vulnerability impacting its Android smartphone users. All impacted phone models will receive the fix, which patches a vulnerability tracked as . The security flaw, issued a critical base score of 8.8 by Samsung Mobile (a CNA), is described as an "out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code."
Information security
Information security
fromZDNET
1 week agoGoogle may shift to risk-based Android security patch rollouts - what that means for you
Google plans a risk-based Android security update system prioritizing critical actively exploited vulnerabilities while moving lower-risk fixes to less frequent patch cycles.
fromTheregister
3 weeks agoBoffins build automated Android bug hunting system
The authors claim that the A2 system achieves 78.3 percent coverage on the Ghera benchmark, surpassing static analyzers like APKHunt (30.0 percent). And they say that, when they used A2 on 169 production APKs, they found "104 true-positive zero-day vulnerabilities," 57 of which were self-validated via automatically generated proof-of-concept (PoC) exploits. One of these included a medium-severity flaw in an Android app with over 10 million installs.
Information security
fromTheregister
3 weeks agoAndroid drops 120 flaw fixes, two exploited in the wild
Patch Tuesday is next week, but Android is ahead of the game, dropping its biggest patch bundle this year while attackers actively exploit two of the now-fixed flaws. This month, the world's most popular mobile operating system pushed out 120 patches, its biggest monthly dump this year. It's a far cry from July, when Android didn't issue a single patch as everything was apparently fine, but in September, two of the flaws may be under "limited, targeted exploitation."
Information security
Information security
fromTechCrunch
1 month agoGoogle will require developer verification for Android apps outside the Play Store | TechCrunch
Google will require identity verification for developers distributing apps on certified Android devices beyond the Play Store, with phased rollout beginning March 2026.
fromThe Hacker News
1 month agoGoogle's August Patch Fixes Two Qualcomm Vulnerabilities Exploited in the Wild
The vulnerabilities include CVE-2025-21479 (CVSS score: 8.6) and CVE-2025-27038 (CVSS score: 7.5), both of which were disclosed alongside CVE-2025-21480 (CVSS score: 8.6) by the chipmaker back in June 2025.
Privacy technologies
Mobile UX
fromArs Technica
2 months agoAndroid phones could soon warn you of "Stingrays" snooping on your communications
Android phones will soon offer enhanced network security notifications for potential attacks.
Current devices lack the necessary hardware support for detecting fake cell towers.
Newer models releasing later this year will enable detection of malicious network activities.
[ Load more ]