Insecure Backend Databases Blamed for Leaking 43TB of App Data

Insecure backend databases and mobile apps are making for a dangerous combination, exposing an estimated 280 million records that include a treasure-trove of private user data. According to a report by Appthority, more than 1,000 apps it looked at on mobile devices leaked personally identifiable...

Judy Android Malware Infects Over 36.5 Million Google Play Store Users

Security researchers have claimed to have discovered possibly the largest malware campaign on Google Play Store that has already infected around 36.5 million Android devices with malicious ad-click software. The security firm Checkpoint on Thursday published a blog post revealing more than 41...

All Android Phones Vulnerable to Extremely Dangerous Full Device Takeover Attack

Researchers have discovered a new attack, dubbed 'Cloak and Dagger', that works against all versions of Android, up to version 7.1.2. Cloak and Dagger attack allows hackers to silently take full control of your device and steal private data, including keystrokes, chats, device PIN, online account...

Google Elevates Security in Android O

Google last week during its I/O event described security tweaks that are part of its upcoming Android O operating system, which is expected to be released later this year. New features are Project Treble and a new permission standard around the feature called Instant App. Also to be introduced wi...

Apple macOS Sierra Restricted Memory Read Vulnerability (CNVD-2017-08139)

Apple macOS is an operating system that runs on Apple's Macintosh line of computers. A restricted memory read vulnerability exists within Apple macOS Sierra, which can be exploited by remote attackers to build malicious applications that read arbitrary restricted memory...

Apple macOS Sierra Intel Image Driver Elevation of Privilege Vulnerability

Apple macOS is an operating system that runs on Apple's Macintosh line of computers. An elevation of privilege vulnerability exists in the Apple macOS Sierra Intel Image Driver, which can be exploited by remote attackers to build malicious applications with elevated privileges...

Apple macOS Sierra iBooks Elevation of Privilege Vulnerability

Apple macOS is an operating system that runs on Apple's Macintosh line of computers. An elevation of privilege vulnerability exists in the handling of symbolic links in Apple macOS Sierra iBooks, which can be exploited by remote attackers to build malicious applications with elevated privileges...

Apple macOS Sierra Sandbox Bypass Vulnerability

Apple macOS is a set of operating systems that run on Apple's Macintosh line of computers. Apple macOS Sierra suffers from a sandbox bypass vulnerability that can be exploited by remote attackers to build malicious applications and elevate privileges...

Apple macOS Sierra Multi-Touch Memory Corruption Vulnerability

Apple macOS is an operating system that runs on Apple's Macintosh line of computers. Apple macOS Sierra Multi-Touch suffers from a memory corruption vulnerability that can be exploited by remote attackers to build malicious apps and elevate privileges...

CVE-2017-6995

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of servic...

VPP Apps May Not be Installed from XenMobile Store for Paid Apps

No errors seen. Paid apps are not installed unless they set to required apps...

BSA-2017-306

Security Advisory ID : BSA-2017-306 Component : Apache Tomcat Revision : 1.0: Interim While investigating bug 60718, it was noticed that some calls to application listeners did not use the appropriate facade object. When running an untrusted application under aSecurityManager, it was therefore...

Code injection

The Android Apps Money Forward prior to v7.18.0, Money Forward for The Gunma Bank prior to v1.2.0, Money Forward for SHIGA BANK prior to v1.2.0, Money Forward for SHIZUOKA BANK prior to v1.4.0, Money Forward for SBI Sumishin Net Bank prior to v1.6.0, Money Forward for Tokai Tokyo Securities prior...

Design/Logic Flaw

The Android Apps Money Forward prior to v7.18.0, Money Forward for The Gunma Bank prior to v1.2.0, Money Forward for SHIGA BANK prior to v1.2.0, Money Forward for SHIZUOKA BANK prior to v1.4.0, Money Forward for SBI Sumishin Net Bank prior to v1.6.0, Money Forward for Tokai Tokyo Securities prior...

CVE-2016-4839

The Android Apps Money Forward prior to v7.18.0, Money Forward for The Gunma Bank prior to v1.2.0, Money Forward for SHIGA BANK prior to v1.2.0, Money Forward for SHIZUOKA BANK prior to v1.4.0, Money Forward for SBI Sumishin Net Bank prior to v1.6.0, Money Forward for Tokai Tokyo Securities prior...

CVE-2016-4838

The Android Apps Money Forward prior to v7.18.0, Money Forward for The Gunma Bank prior to v1.2.0, Money Forward for SHIGA BANK prior to v1.2.0, Money Forward for SHIZUOKA BANK prior to v1.4.0, Money Forward for SBI Sumishin Net Bank prior to v1.6.0, Money Forward for Tokai Tokyo Securities prior...

CVE-2016-4838

The CVE-2016-4838 issue affects Money Forward Android apps and related variants, including Money Forward for The Gunma Bank, SHIGA Bank, SHIZUOKA Bank, SBI Sumishin Net Bank, Tokai Tokyo Securities, THE TOHO Bank, YMFG, and related AppPass/au SMARTPASS/Chou Houdai, provided by Money Forward, Inc....

CVE-2016-4839

The Android Apps Money Forward prior to v7.18.0, Money Forward for The Gunma Bank prior to v1.2.0, Money Forward for SHIGA BANK prior to v1.2.0, Money Forward for SHIZUOKA BANK prior to v1.4.0, Money Forward for SBI Sumishin Net Bank prior to v1.6.0, Money Forward for Tokai Tokyo Securities prior...

CVE-2017-0634

An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2017-0621

An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...