WhatsApp vulnerability could be exploited to install spyware
A vulnerability in Facebook’s WhatsApp could allow attackers to install spyware on impacted smartphones.
Mobile Security
Apple releases security updates for iOS, macOS and other products
Apple released security updates that address vulnerabilities in multiple products, to include iOS, macOS, Safari, watchOS, tvOS and Apple TV Software. Additional mitigations for speculative execution vulnerabilities in Intel CPUs or “Spectre” were also included in the latest macOS update.
Xiaomi phone vulnerabilities found in pre-installed software
Check Point security researchers have discovered a vulnerability in security software that comes pre-installed in Xiaomi smartphones.
NIST SP 1800-4: Mobile Device Security
The National Institute of Standards and Technology (NIST) has released its Security Publication (SP) 1800-4, that includes security guidelines for mobile device security in cloud and hybrid environments.
Serious iPhone FaceTime bug allows eavesdropping
A serious bug has been discovered in FaceTime, Apple’s video and chat app for iPhones. The vulnerability can allow a user to listen in on another iPhone user’s conversation before they pickup and without the recipient’s knowledge.
Apple releases iOS 12, security updates and new product features
Apple has released security updates to address vulnerabilities and also added many new feature improvements in iOS12 and multiple other Apple products.
Air Canada mobile app data breach
Air Canada notified customers of a data breach involving the airline’s mobile application and potentially impacting thousands of user profiles.
Attackers attack open ADB ports to spread malware
Attackers are exploiting IoT devices with open ADB port 5555 to spread malware.
Malicious MDM targets mobile phones in India
An attacker has used an open-source mobile device management (MDM) system to target iPhones in India.
HeroRat: Telegram-abusing Android RAT
ESET security researchers have discovered a new Android RAT (Remote Administration Tool) variant in the wild. The new variant is dubbed “HeroRat” and abuses the Telegram protocol for command and control, and can steal sensitive data.