Meta Set to Enable Default End-to-End Encryption on Messenger by Year End

Meta has once again reaffirmed its plans to roll out support for end-to-end encryption E2EE by default for one-to-one friends and family chats on Messenger by the end of the year. As part of that effort, the social media giant said it's upgrading "millions more people's chats" effective August 22...

Medtronic Micro Clinician and InterStim Apps

1. EXECUTIVE SUMMARY CVSS v3 6.4 ATTENTION: Low attack complexity Vendor: Medtronic Equipment: Micros Clinician A51200 app and InterStim X Clinician A51300 app Vulnerabilities: Unverified Password Change 2. RISK EVALUATION Successful exploitation of this vulnerability could cause the clinician...

VulnCheck KEV: CVE-2023-20963

Android Framework contains an unspecified vulnerability that allows for privilege escalation after updating an app to a higher Target SDK with no additional execution privileges needed...

ASB-A-223907044

In PermissionController, there is a possible way to get and retain permissions without user's consent due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

Workspace App 1912.1000 - Workspace App Update removes user created shortcuts from Desktop

Consider the following scenario: Users have created shortcuts of published applications manually on their Desktop and have also pinned it to the task bar. When the Receiver is upgraded from 4.9.6001 to Workspace App for Windows 1912 or 2006, on the first launch of a published app, the shortcuts...

Several Unpatched Popular Android Apps Put Millions of Users at Risk of Hacking

A number of high-profile Android apps are still using an unpatched version of Google's widely-used app update library, potentially putting the personal data of hundreds of millions of smartphone users at risk of hacking. Many popular apps, including Grindr, Bumble, OkCupid, Cisco Teams, Moovit,...

August 2014 MDM client update in Windows RT 8.1 and Windows 8.1

August 2014 MDM client update in Windows RT 8.1 and Windows 8.1 Symptoms Issue 1 Assume that you install a Windows Store app, such as Microsoft OneNote, through Mobile Device Manager MDM in Windows RT 8.1 or Windows 8.1. In this situation, the app cannot be updated through Windows Store...

Twitter Fixes Bug that Enabled Takeover of Android App Accounts

Twitter for Android users are being urged to update their app to avoid a security bug that allows a malicious user to access private account data and could also allow an attacker to take control of accounts to send tweets and direct messages. The warning comes from Twitter who said there are no...

CVE-2016-6539

The CVE-2016-6539 issue affects the TrackR ecosystem: the device ID is formed by four leading zeroes plus the BLE MAC address reversed, which can be inferred by an attacker in Bluetooth range. This ID exposure enables device tracking. Updated apps (TrackR iOS 5.1.6 and Android 2.2.5) were release...

Anonymous Messaging App Sarahah to Halt Collection of User Data With Next Update

Sarahah, the anonymous messaging app that shot to the top of app stores earlier this summer, says it plans to remove a feature that uploads users’ contacts, including phone numbers and email addresses to the company’s servers, in the next update. The app’s creator, Zain al-Abidin Tawfiq, caught...

After updating the app, receiving an error : Incompatible error

After updating the app Secure Mail, receiving an error when launching apps. Devices: iOS only ERROR: "Incompatible app, please try removing this app and then reinstalling it."...

Popular Android App Leaks Microsoft Exchange User Credentials

A popular Android app used to access corporate email, calendar and contacts via Microsoft Exchange servers is vulnerable to leaking user credentials to attackers. The application called Nine, according to researchers at Rapid7, could allow an attacker to launch a man-in-the-middle attack, allowin...

LG Handsets' App Update Doesn't Verify SSL Cert, Could Lead to Hijacking

Many smartphones manufactured by LG contain a vulnerability that can allow an attacker to replace an APK file with a malicious file of his choice. The problem is the result of several conditions on LG phones. Like other manufacturers, LG includes custom apps on its handsets, which are not availab...