Cybersecurity Highlights

This section registers the most relevant incidents or public events related to the cybersecurity and information and communication technologies (ICT), in a way that a chronological history of them is available, together with their main links, references and information sources.

Post related to: Application

Firebase platform suffers from data exposure

Firebase, a Google platform for developing web and mobile applications, has exposed sensitive information from more than 4,000 applications that use its database, due to poor permission settings by...

References:

comparitech.com

thehackernews.com

unaaldia.hispasec.com

Tags:

LineageOS suffers cyberattack attempt through Salt

LineageOS, an Android-based mobile operating system, has reported an intrusion carried out at the beginning of May by cyberattackers with the intention of accessing its central infrastructure.The...

References:

status.lineageos.org

twitter.com

zdnet.com

expresscomputer.in

incibe-cert.es

Tags:

Android

Application

Cybercrime

Free antivirus has sold its users’ data

Ondrej Vlcek, Avast CEO, has acknowledged in an official statement that the company has sold its users’ data to third parties through its subsidiary Jumpshot.The fact has been revealed in a...

References:

blog.avast.com

vice.com

pcmag.com

es.gizmodo.com

elmundo.es

Tags:

Application

Cyberespionage

Information leakage

Security flaw in TikTok solved

Check Point cybersecurity researchers detected and reported a security flaw in the application of the popular social network TikTok.This flaw could have allowed cybercriminals to take control of...

References:

checkpoint.com

theverge.com

threatpost.com

globbsecurity.com

Tags:

Application

Social networks

Vulnerability

Avast suffers a cyberattack against its VPN

Avast, a Czech cybersecurity software multinational, has admitted in a statement that it was the victim of a cybersecurity campaign called Abiss, in which its network was accessed.Avast discovered...

References:

blog.avast.com

forbes.com

zdnet.com

genbeta.com

Tags:

Application

Cybercrime

Cyberespionage

Google improves Google Play Security Reward Program

In 2017, Google launched the Google Play Security Rewards Program (GPSRP) and three years after its creation, they have just announced an improvement in the program.With the aim of improving...

References:

android-developers.googleblog.com

zdnet.com

xatakandroid.com

andro4all.com

Tags:

G Suite of Google stored passwords in plain text

Google has notified G Suite users and administrators that it had stored plain text passwords since 2005, due to a failure in the platform's administration console. G Suite, formerly Google Apps, is...

References:

cloud.google.com

bleepingcomputer.com

databreachtoday.com

genbeta.com

Tags:

Application

Encryption

Google

Google withdraws applications from the developer DO Global from Play Store

Google has removed applications from the Chinese developer of DO Global software, including file manager ES File Explorer, from its Google Play store due to fraud in its advertising system and...

References:

do.global

elandroidelibre.elespanol.com

osi.es

larazon.es

europapress.es

xatakandroid.com

Tags:

Android

Application

Google

Matrix Tchap app suffers security breach

Elliot Alderson (better known as Baptiste Robert) is a security researcher who discovered that Tchap's identification system, an application developed by Matrix, contained a vulnerability that...

References:

matrix.org

numerique.gouv.fr

medium.com

techcrunch.com

thehackernews.com

unaaldia.hispasec.com

tecnonucleous.com

Tags:

Application

Incident

Public administration

Vulnerability

Malware uses Google Drive services as its C&C server

A new variant of the RogueBin Trojan uses Google Drive as its Command & Control (C&C) server. The Trojan infects the victim's computers when the user opens a Microsoft Excel file containing...

References:

thehackernews.com

2-spyware.com

welivesecurity.com

globalnotary.es

Tags:

Corporate access

Cybersecurity Highlights

Firebase platform suffers from data exposure

LineageOS suffers cyberattack attempt through Salt

Free antivirus has sold its users’ data

Security flaw in TikTok solved

Avast suffers a cyberattack against its VPN

Google improves Google Play Security Reward Program

G Suite of Google stored passwords in plain text

Google withdraws applications from the developer DO Global from Play Store

Matrix Tchap app suffers security breach

Malware uses Google Drive services as its C&C server

Pages