The bug hunters that comprise Google's Project Zero team are getting a little fed up with companies that issue incomplete or otherwise incorrect patches for zero-day vulnerabilities they discover. Going into 2021, the team plans to reevaluate how it handles these kinds of situations, with a recent privilege escalation...
Read more...
It seems Qualcomm is having a devil of a time fixing a security flaw related to its Adreno GPU driver code. It was brought to Qualcomm's attention by Google's Project Zero team, which sniffs out vulnerabilities and compels companies to fast-track security fixes by going public with the details after 90 days have...
Read more...
Google’s Account Protection Program is their strongest level of account security for those who are at higher risk for attack. Now, Google Chrome is expanding protections for the Advanced Protection users by improving download scanning options.
According to Google, Advanced Protection members have been guarded from...
Read more...
If Garmin did not already have a giant target on its back, it sure does now, if a report that it paid a multi-million dollar ransom to hackers is true. Speaking on the condition of anonymity, sources cited as being familiar with the matter told Sky News that Garmin hired a company that specializes in ransomware...
Read more...
Garmin is having itself a no good, terrible day. and it could extend throughout the weekend. The cause of Garmin's woes is a ransomware attack, according to employees who have posted about the matter on social media, and it is affecting several of the company's services for its line of wearable products and aviation...
Read more...
App stores are imperfect places, and serving as a reminder of this, a cybersecurity firm based in France alerted Google to the discovery of over two dozen malicious Android apps hanging out in the Play Store. Fortunately, Google was quick to banish the apps. However, if you already have any of them installed, you...
Read more...
A third-party security team uncovered a massive ring of Chrome spyware extensions that were all working together. The nefarious extensions had been downloaded a total of over 32 million times and impacted millions of Chrome browsers.
The researchers at Awake Security are coming forward after they informed Google of...
Read more...
Google has announced that it has begun the rollout of new tools and a redesign of the Chrome web browser's privacy and security settings on desktop. The goal is to give users more control over their safety on the web. Among the updated controls are easier to manage cookies allowing users to choose if and how cookies...
Read more...
The security research team at Comparitech has conducted an audit of hundreds of thousands of apps on the Google Play store. The research team found common misconfigurations on Google Firebase databases that allow unauthorized parties to find and access personal data of users. Firebase is one of the most popular...
Read more...
Google is answering the call to make Android more secure and less likely to contract a malware infection, at least for users who opt into the company's Advanced Protection Program. This is primarily intended for journalists, activists, business leaders, political campaign teams, and other individuals and organizations...
Read more...
Google began rolling out version 80 of its Chrome browser to the public at large in early February, with the most publicized feature being a new cookie classification system designed to give users more control over cookie controls. While cookie handling dominated the headlines, Chrome 80 also added stronger...
Read more...
Samsung has announced its new Secure Element solution that offers secure key storage with CC EAL (Common Criteria Evaluation Assurance Level) 5+ certification and dedicated security software for enhanced data protection. The new Secure Element features a security chip and optimized software designed to guard private...
Read more...
Another day, another data privacy flub, and this time it's from Google. Google Takeout is a service that allows users to download their data from Google apps as a backup or to use it with another service. That sounds good on the surface until, somehow, Google managed to send backed up videos to unrelated users. Google...
Read more...
Through its Project Zero division, Google has tasked itself with motivating technology companies to push out timely patches for zero day vulnerabilities. It does this by giving companies 90 days to patch a security flaw before going public with the details. There are differing opinions on whether this is the right...
Read more...
It's been a rough couple months for makers of IP security cameras as no one seems to be able to keep user data secure. The latest issue that has sprung up involves Xiaomi cameras that are linked to a Google account. An owner has posted to Reddit that his Xiaomi Mijia camera and Nest Hub setup is receiving still images...
Read more...
Google began rolling out its new SMS text messaging protocol earlier with month, with features powered RCS by (Rich Communication Services). This is intended to deliver a richer messaging experience. And it does, though the rollout is not going without a hitch. Unfortunately, telecoms are doing a poor job implementing...
Read more...
Mobile users can mitigate the risk of falling prey to malware by only downloading apps from reputable app stores. The Play Store is one of them, and it is the largest around for Android, though the risk is not by any means non-existent. Google realizes this, and has forged an App Defense Appliance with ESET, Lookout...
Read more...
If you rely on Google's Chrome browser to get around the web, be aware that an update is available that addresses a couple of "High" security threats. One of those—labeled CVE-2019-13720—is a zero-day vulnerability that is known to be actively exploited in the wild, though it is not clear to what extent nefarious...
Read more...
Wondering if any of your passwords have been compromised in a data breach? Google is making it easier to quicker to find out the answer to broadening the reach of its Password Checkup tool. Once a standalone extension to the Chrome browser, the handy tool is now integrated into the built-in password manager for your...
Read more...
Google has launched another (Go edition) version of Android for entry-level smartphones, built on top of Android 10. It's the second release of a (Go edition) build, and is "faster and more secure" than the previous release that was built on top of Android 9 Pie, Google claims. Part of that claim is tied to a new...
Read more...
A member of Google's Project Zero security team has written a lengthy blog post detailing a series of iOS exploit chains discovered in the wild. According to Project Zero's findings, a hacking group underwent a "sustained effort to hack the users of iPhones" for a period of at least two years. This was accomplished...
Read more...
Google has announced that its strongest level of protection for personal Google Accounts is now available for Chrome. The Advanced Protection Program is aimed at anyone at risk of targeted attacks, including journalists, activists, politicians, and business leaders. Google notes that it has an evolving list of...
Read more...
