Cybersecurity Highlights

This section registers the most relevant incidents or public events related to the cybersecurity and information and communication technologies (ICT), in a way that a chronological history of them is available, together with their main links, references and information sources.

Post related to: Android

Pre-installed Backdoor On 700 Million smartphones

Kryptowire security company discovers a backdoor on thousands of mobile devices and other android based devices manufactured by different companies that use a software for its update created by the...

References:

tecnologia.elpais.com

abc.es

xataka.com

thehackernews.com

prnewswire.com

kryptowire.com

Tags:

Android

Cyberespionage

Information leakage

A flaw in TCP implementation threatens users

A flaw in TCP implementation in Linux kernel 3.6 and newer might allow malware injection or traffic hijacking. This kernel version is widely used, affecting Android devices and Smart TVs.The...

References:

thehackernews.com

threatpost.com

securityintelligence.com

Tags:

Pokemon Go servers affected by DDoS attack

The servers of the popular game Pokemon Go developed by Niantic for iOS and Android devices have fallen as a result of a possible DDoS attack, as announced by the company on Twitter. The authorship...

References:

gizmodo.com

www.mirror.co.uk

andro4all.com

Tags:

A flaw in Qualcomm processors allows access to ciphered information

A flaw in Qualcomm mobile processors, used in 60% Android mobiles, allows an attacker to access the ciphered information stored. The ciphering keys are generated using a module called KeyMaster,...

References:

infosecurity-magazine.com

threatpost.com

csoonline.com

elandroidlibre.com

http://bits-please.blogspot.com.es

Tags:

WhatsApp enables end-to-end encryption

WhatsApp has enabled end-to-end encryption for conversations and pone calls in its latest versions (2.12.556 for Android y 2.16.1 in case of iOS). This encryption will increase security for the...

References:

whatsapp.com

whispersystems.org

infosecurity-magazine.com

theguardian.com

elconfidencial.com

eldiario.es

Tags:

Bankosy: Android malware able to steal passwords received via phone call

Bankosy, the Android malware is now able to steal passwords generated by 2 Authentication Factor systems sent via phone call. Phone calls are usually preferred to send the second authentication...

References:

symantec.com

securityweek.com

securityaffairs.co

softzone.es

Tags:

Android

Malware

Backdoor in the Android SDK Baidu threatens 100 million devices

Security researchers from Trend Micro has reported that the software development kit for Android Moplus, created by the Chinese company Baidu, contains a feature generates a backdoor in the users...

References:

trendmicro.com

pcworld.com

thehackernews.com

Tags:

Android

Vulnerability

Android’s Stagefright framework flaw puts million users at risk

Zimperium security company announced the existence of a bug in the Android OS from version 2.2 to version 5.1.1_r4, 95% of Android devices - an estimated 950 million devices, which allows the...

References:

zimperium.com

wired.co.uk

osi.es

welivesecurity.com

cert.org

Tags:

Android

Vulnerability

FREAK, a vulnerability that reduces security in Android and Apple users

A group of investigators, named SMACK, have discovered several vulnerabilities in OpenSSL and Apple's TLS/SSL, that could allow a MiTM attack, degrading the security of the connections, moving from...

References:

washingtonpost.com

cryptographyengineering.com

freakattack.com

securityaffairs.co/

incibe.es

cert.org

Tags:

Fuga de información en Cerberus para Android

El equipo de seguridad de la aplicación antirrobo Cerberus, para Android, ha detectado un acceso no autorizado a un log de sus servidores. Dicho log contenía los nombres de usuarios y contraseñas...

References:

google plus

softpedia.com

Tags:

Android

Information leakage

Incident

Corporate access

Cybersecurity Highlights

Pre-installed Backdoor On 700 Million smartphones

A flaw in TCP implementation threatens users

Pokemon Go servers affected by DDoS attack

A flaw in Qualcomm processors allows access to ciphered information

WhatsApp enables end-to-end encryption

Bankosy: Android malware able to steal passwords received via phone call

Backdoor in the Android SDK Baidu threatens 100 million devices

Android’s Stagefright framework flaw puts million users at risk

FREAK, a vulnerability that reduces security in Android and Apple users

Fuga de información en Cerberus para Android

Pages