De multiples vulnérabilités ont été découvertes dans Google Android. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.
This page shows only the headline and the short summary. The full text is published by the original source.
The overwhelming majority of the infected devices in the X.CPE botnet are Android TV set-top boxes, Google said, adding that they observed a number of other infected Android-based IoT devices, including telehealth devices, karaoke machines and digital signage devices.
Dawid Golunski discovered that Swift Mailer did not properly sanitize e-mail addresses in the mail transport. A remote attacker could possibly use this issue to pass extra parameters to the mail command and execute arbitrary code.
Researchers from the Citizen Lab and Princeton have won the IRTF Applied Networking Research Prize for their work on the network security of Android apps. The post Citizen Lab Researchers Win IRTF Applied Networking Research Prize appeared first on The Citizen Lab.
Google disrupted the XCPE botnet affecting 1.3 million Android devices, exposing allegations of manufacturer-installed backdoors and supply-chain security risks.
