Android Automotive OS Update Bulletin—December 2022Stay organized with collectionsSave and categorize content based on your preferences.

The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2022-12-05 or later from the December 2022 Android Security Bulletin in addition to all issues in th...

Watch Out! These Android Keyboard Apps With 2 Million Installs Can be Hacked Remotely

Multiple unpatched vulnerabilities have been discovered in three Android apps that allow a smartphone to be used as a remote keyboard and mouse. The apps in question are Lazy Mouse, PC Keyboard, and Telepad, which have been cumulatively downloaded over two million times from the Google Play Store...

Schoolyard Bully Trojan Apps Stole Facebook Credentials from Over 300,000 Android Users

More than 300,000 users across 71 countries have been victimized by a new Android threat campaign called the Schoolyard Bully Trojan. Mainly designed to steal Facebook credentials, the malware is camouflaged as legitimate education-themed applications to lure unsuspecting users into downloading...

Google Apps Login < 3.4.5 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. 1. Go to the setting page of this plugin. 2. In...

Google Apps Login < 3.4.5 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. PoC 1. Go to the setting page of this plugin. 2...

U.S. Govt. Apps Bundled Russian Code With Ties to Mobile Malware Developer

A recent scoop by Reuters revealed that mobile apps for the U.S. Army and the Centers for Disease Control and Prevention CDC were integrating software that sends visitor data to a Russian company called Pushwoosh, which claims to be based in the United States. But that story omitted an important...

Microsoft 365 Apps for Enterprise Office Unauthorized Access

The vulnerability of Microsoft 365 Apps for Enterprise and Microsoft Office packages is related to the lack of protection for sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to a device through a specially created file...

Microsoft Office Microsoft 365 Apps for Enterprise Code Execution

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise programs exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to execute arbitrary code...

Microsoft 365 Apps for Enterprise Excel Office Code Execution

The vulnerability of Microsoft 365 Apps for Enterprise, Microsoft Excel, and Microsoft Office exists due to insufficient validation of input data. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code using a specially created file...

Microsoft Excel Office 365 Apps for Enterprise Information Disclosure

The vulnerability of Microsoft Excel, Microsoft Office, and Microsoft 365 Apps for Enterprise programs is related to security configuration errors. Exploiting this vulnerability can allow attackers to disclose sensitive information through a specially created file...

@cerebroapp/cerebro-basic-apps (>=1.0.0-alpha.0, <=1.0.0-alpha.1), @finsemble/finsemble-core (>=1.0.0-beta-3, <=8.0.2) +11 more potentially affected by CVE-2022-4135 via electron (>=19.0.0, <=19.0.17)

electron NPM version =19.0.0, =1.0.0-alpha.0, =1.0.0-beta-3, =1.0.0-beta-3, =3.0.9, =0.36.0-canary.17, =0.0.32, =2.0.74, =2.0.90 - simple-git-gui 3.8.31 Source cves: CVE-2022-4135 Source advisory: OSV:GHSA-995F-9X5R-2RCJ...

Microsoft Excel Office 365 Apps for Enterprise Code Execution

The vulnerability of Microsoft Excel, Microsoft Office, and Microsoft 365 Apps for Enterprise programs exists due to insufficient validation of input data. Exploiting this vulnerability allows attackers to execute arbitrary code using a specially created file...

Bahamut Cyber Espionage Hackers Targeting Android Users with Fake VPN Apps

The cyber espionage group known as Bahamut has been attributed as behind a highly targeted campaign that infects users of Android devices with malicious apps designed to extract sensitive information. The activity, which has been active since January 2022, entails distributing rogue VPN apps...

This Android File Manager App Infected Thousands of Devices with SharkBot Malware

The Android banking fraud malware known as SharkBot has reared its head once again on the official Google Play Store, posing as file managers to bypass the app marketplace's restrictions. A majority of the users who downloaded the rogue apps are located in the U.K. and Italy, Romanian cybersecuri...

Microsoft Office Code Execution

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, Microsoft SharePoint, Microsoft Excel, and Microsoft Office Web Apps Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to execute arbitrary code...

A Destabilizing Hack-and-Leak Operation Hits Moldova

Plus: Google’s location snooping ends in a $391 million settlement, Russian code sneaks into US government apps, and the World Cup apps set off alarms...

Experts Uncover Two Long-Running Android Spyware Campaigns Targeting Uyghurs

Two long-running surveillance campaigns have been found targeting the Uyghur community in China and elsewhere with Android spyware tools designed to harvest sensitive information and track their whereabouts. This encompasses a previously undocumented malware strain called BadBazaar and updated...

Malicious Google Play Store App Spotted Distributing Xenomorph Banking Trojan

Google has removed two new malicious dropper apps that have been detected on the Play Store for Android, one of which posed as a lifestyle app and was caught distributing the Xenomorph banking malware. "Xenomorph is a trojan that steals credentials from banking applications on users' devices,"...

Meta ReDex buffer error vulnerability

Meta ReDex is an Android bytecode dex optimizer from Meta USA. Meta ReDex suffers from a security vulnerability that stems from the possibility of loading an out-of-bounds address when loading a string index table, which could allow remote code execution when processing third-party Android APK...

CVE-2022-44549

The LBS module has a vulnerability in geofencing API access. Successful exploitation of this vulnerability may cause third-party apps to access the geofencing APIs without authorization, affecting user confidentiality...