Cybersecurity Highlights

This section registers the most relevant incidents or public events related to the cybersecurity and information and communication technologies (ICT), in a way that a chronological history of them is available, together with their main links, references and information sources.

Post related to: Google

FCM keys expose millions of users to spam and phishing

Security researcher Abhishek Dharani, known as Abss, has blogged an investigation related to a vulnerability in Firebase Cloud Messaging (FCM), a cloud solution for messages and notifications on...

References:

abss.me

portswigger.net

cybernews.com

nakedsecurity.sophos.com

Tags:

Firebase platform suffers from data exposure

Firebase, a Google platform for developing web and mobile applications, has exposed sensitive information from more than 4,000 applications that use its database, due to poor permission settings by...

References:

comparitech.com

thehackernews.com

unaaldia.hispasec.com

Tags:

Security fail over Xiaomi cameras

Several users have been affected by a security fail using Mi Home Basic 1080p, through Google Home Hub. This fail allowed them to access to the video signal of other users with the same gadgets.One...

References:

c.mi.com

androidpolice.com

xataka.com

thehackernews.com

Tags:

Google

Information leakage

IoT

Google creates the App Defense Alliance to improve the security of the Google Play Store

To promote the security of Google Play Store, Google has started a collaboration with ESET, Lookout and Zimperium named App Defense Alliance. The main goal of this alliance is to stop malware...

References:

security.googleblog.com

wired.com

engadget.com

silicon.es

muyseguridad.net

Tags:

Android

Google

Malware

Google reveals how an iOS malware campaign works

In early 2019, Google’s Threats Analysis Group (TAG) notified Apple about 14 vulnerabilities affecting iPhone devices from versions iOS 10 to iOS 12. This vulnerabilities was patched on out-of-band...

References:

googleprojectzero.blogspot.com

support.apple.com

forbes.com

unaaldia.hispasec.com

Tags:

Google improves Google Play Security Reward Program

In 2017, Google launched the Google Play Security Rewards Program (GPSRP) and three years after its creation, they have just announced an improvement in the program.With the aim of improving...

References:

android-developers.googleblog.com

zdnet.com

xatakandroid.com

andro4all.com

Tags:

Google recognizes that they listens to fragments of the conversations users have with their devices

Google has recognized in its blog "The Keyword", that they listen to some fragments of the conversations that users have with their devices. They indicate that it is a way to improve the devices,...

References:

blog.google

techcrunch.com

abc.es

genbeta.com

Tags:

Google

Information leakage

IoT

G Suite of Google stored passwords in plain text

Google has notified G Suite users and administrators that it had stored plain text passwords since 2005, due to a failure in the platform's administration console. G Suite, formerly Google Apps, is...

References:

cloud.google.com

bleepingcomputer.com

databreachtoday.com

genbeta.com

Tags:

Application

Encryption

Google

Google withdraws applications from the developer DO Global from Play Store

Google has removed applications from the Chinese developer of DO Global software, including file manager ES File Explorer, from its Google Play store due to fraud in its advertising system and...

References:

do.global

elandroidelibre.elespanol.com

osi.es

larazon.es

europapress.es

xatakandroid.com

Tags:

Android

Application

Google

Google+ shutdown accelerates after bug discovered

Google has announced that it will accelerate the closure of all Google+ APIs to April 2019, after discovering that the personal information of 52.5 million of its customers was affected by a...

References:

blog.google

xataka.com

threatpost.com

incibe-cert.es

cloud.google.com

Tags:

Information leakage

Google

Incident

Corporate access

Cybersecurity Highlights

FCM keys expose millions of users to spam and phishing

Firebase platform suffers from data exposure

Security fail over Xiaomi cameras

Google creates the App Defense Alliance to improve the security of the Google Play Store

Google reveals how an iOS malware campaign works

Google improves Google Play Security Reward Program

Google recognizes that they listens to fragments of the conversations users have with their devices

G Suite of Google stored passwords in plain text

Google withdraws applications from the developer DO Global from Play Store

Google+ shutdown accelerates after bug discovered

Pages