Malware-Laced App Stayed on Google Play For a Year

An Android app booby-trapped with malware was recently taken down from Google Play — after being available for download for almost a year. The trojan was discovered by ESET malware researcher Lukas Stefanko, wrapped into an app called the Simple Call Recorder. The main purpose of the malware was ...

ThreatList: Google Play Nine Times Safer Than Third-Party App Stores

Bearing out the conventional wisdom that avoiding third-party app stores is a security best practice, new data from Google shows that Android devices that only download apps from Google Play are nine times less likely to end up with malware. According to Google’s inaugural Android Ecosystem...

New Android API Lets Developers Push Updates Within their Apps

You might have read somewhere online today that Google is granting Android app developers powers to forcefully install app updates…but it is not true. Instead, the tech giant is providing a new feature that will help users to have up-to-date Android apps all the time and yes, it's optional. Along...

Google Will Charge Android Phone Makers to Use Its Apps In Europe

Would you prefer purchasing an Android device that doesn't have any apps or services from Google? No Google Maps, No Gmail, No YouTube! And NOT even the Google Play Store—from where you could have installed any Android apps you want Because if you live in Europe, from now on, you have to spend so...

Google Will Charge Android Phone Makers to Use Its Apps In Europe

Would you prefer purchasing an Android device that doesn't have any apps or services from Google? No Google Maps, No Gmail, No YouTube! And NOT even the Google Play Store—from where you could have installed any Android apps you want Because if you live in Europe, from now on, you have to spend so...

Denial of Service Vulnerability in H3C ER2100n

The H3C ER2100n is an enterprise-class router. A denial of service vulnerability exists in the H3C ER2100n. All UPnP methods of the router can be accessed without authorization. When the input parameter of the UPnP method contains the character "\x00", the UPnP service will crash, and a manual...

@nteract/commuter (5.6.9), @nteract/play (1.6.8) +4 more potentially affected by CVE-2018-18282 via next (>=7.0.0, <=7.0.1)

next NPM version =7.0.0, =7.0.0, =0.30.0, =2.0.0, =0.1.1, =0.1.4 Source cves: CVE-2018-18282 Source advisory: OSV:GHSA-QW96-MM2G-C8M7...

Malicious Platform Independent Trojan GPlayed Disguised as Google Play Store

By Waqas Newly discovered Trojan malware, which has been dubbed as GPlayed by the IT security experts at Cisco Talos, disguises itself as Google Play Store to trick users into downloading it. After getting installed, it steals location information and bank details from the device. Additionally, i...

Fortnite for Android Released, But Make Sure You Don't Download Malware

Yes, it is official. The massively popular battle royale video game from Epic Games, Fortnite: Battle Royale is finally available for Android devices. Epic announced Thursday that the Android version of Fortnite is now available for everyone to download for free, so you no longer require an invit...

From Now On, Only Default Android Apps Can Access Call Log and SMS Data

A few hours ago the company announced its "non-shocking" plans to shut down Google+ social media network following a "shocking" data breach incident. Now to prevent abuse and potential leakage of sensitive data to third-party app developers, Google has made several significant changes giving user...

Cisco IOS Software and IOS XE Software Memory Disclosure Vulnerability

Cisco IOS Software and IOS XE Software are both operating systems developed by Cisco for its network devices. A memory leak vulnerability exists in the Network Plug and Play agent in Cisco IOS Software and IOS XE Software, which arises from a failure of an affected device to properly validate...

CVE-2018-15377

A vulnerability in the Cisco Network Plug and Play agent, also referred to as the Cisco Open Plug-n-Play agent, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak on an affected device. The vulnerability is due to insufficient...

CVE-2018-15377

A vulnerability in the Cisco Network Plug and Play agent, also referred to as the Cisco Open Plug-n-Play agent, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak on an affected device. The vulnerability is due to insufficient...

CVE-2018-0463

A vulnerability in the Cisco Network Plug and Play server component of Cisco Network Services Orchestrator NSO could allow an unauthenticated, remote attacker to gain unauthorized access to configuration data that is stored on an affected NSO system. The vulnerability exists because the Network...

Input validation

A vulnerability in the Cisco Network Plug and Play agent, also referred to as the Cisco Open Plug-n-Play agent, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak on an affected device. The vulnerability is due to insufficient...

CVE-2018-0463

CVE-2018-0463 describes a vulnerability in the Cisco Network Plug and Play server component of Cisco NSO. The issue stems from incomplete validation when NSO is configured to use Secure Unique Device Identifier (SUDI) authentication, allowing an unauthenticated, remote attacker to gain unauthoriz...

CVE-2018-15377

Cisco IOS and IOS XE Software Plug and Play (Open Plug-n-Play) agent has a memory-leak vulnerability caused by insufficient input validation. An unauthenticated, remote attacker can send invalid data to the Plug and Play agent, potentially causing a memory leak and device reload. Affected: Cisco ...

CVE-2018-0463: Undefined Security Weakness

A vulnerability in the Cisco Network Plug and Play server component of Cisco Network Services Orchestrator NSO could allow an unauthenticated, remote attacker to gain unauthorized access to configuration data that is stored on an affected NSO system. The vulnerability exists because the Network...

CVE-2018-15377: Uncontrolled Resource Consumption

A vulnerability in the Cisco Network Plug and Play agent, also referred to as the Cisco Open Plug-n-Play agent, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak on an affected device. The vulnerability is due to insufficient...

PT-2018-8845

Name of the Vulnerable Software and Affected Versions Cisco Network Services Orchestrator NSO affected versions not specified Description A vulnerability exists in the Cisco Network Plug and Play server component due to incomplete validation when using secure unique device identifiers SUDI for...