PT-2020-8044

Name of the Vulnerable Software and Affected Versions: Symantec Norton Mobile Security for Android versions prior to 3.16 Description: An issue exists where sensitive information could be obtained by a local malicious user due to an Information Disclosure vulnerability in the mid.dat file stored ...

CVE-2016-6587: Exposure of Sensitive Information to an Unauthorized Actor

An Information Disclosure vulnerability exists in the mid.dat file stored on the SD card in Symantec Norton Mobile Security for Android before 3.16, which could let a local malicious user obtain sensitive information...

CVE-2016-6586: Improper Input Validation

A security bypass vulnerability exists in Symantec Norton Mobile Security for Android before 3.16, which could let a malicious user conduct a man-in-the-middle via specially crafted JavaScript to add arbitrary URLs to the URL whitelist...

CVE-2016-6585: Improper Input Validation

A Denial of Service vulnerability exists in Symantec Norton Mobile Security for Android prior to 3.16, which could let a remote malicious user conduct a man-in-the-middle attack via specially crafted JavaScript...

PT-2020-8043

Name of the Vulnerable Software and Affected Versions: Symantec Norton Mobile Security for Android versions prior to 3.16 Description: A security bypass issue exists, potentially allowing a malicious user to conduct a man-in-the-middle attack via specially crafted JavaScript. This could enable th...

PT-2020-8042

Name of the Vulnerable Software and Affected Versions: Symantec Norton Mobile Security for Android versions prior to 3.16 Description: A Denial of Service issue exists, which could allow a remote malicious user to conduct a man-in-the-middle attack via specially crafted JavaScript. Recommendation...

The Everyday Cyber Threat Landscape: Trends from 2019 to 2020

The past 12 months have been another bumper year for cybercrime affecting everyday users of digital technology. Trend Micro blocked more than 26.8 billion of these threats in the first half of 2019 alone. The bad news is that there are many more out there waiting to steal your personal data for...

CVE-2019-19690

Trend Micro Mobile Security for Android Consumer versions 10.3.1 and below on Android 8.0+ has an issue in which an attacker could bypass the product's App Password Protection feature...

CVE-2019-19690

Trend Micro Mobile Security for Android Consumer versions 10.3.1 and below on Android 8.0+ has an issue in which an attacker could bypass the product's App Password Protection feature...

Design/Logic Flaw

Trend Micro Mobile Security for Android Consumer versions 10.3.1 and below on Android 8.0+ has an issue in which an attacker could bypass the product's App Password Protection feature...

CVE-2019-19690

CVE-2019-19690 affects Trend Micro Mobile Security for Android (Consumer) versions 10.3.1 and earlier on Android 8.0+. The vulnerability enables bypass of the product’s App Password Protection feature. Details on root cause, affected files/components, exploit steps, or concrete remediation are no...

PT-2019-15914

Name of the Vulnerable Software and Affected Versions Trend Micro Mobile Security for Android Consumer versions 10.3.1 and below Description The issue allows an attacker to bypass the App Password Protection feature. Recommendations For versions 10.3.1 and below, update to a version above 10.3.1 ...

CVE-2019-19690: Weak Password Requirements

Trend Micro Mobile Security for Android Consumer versions 10.3.1 and below on Android 8.0+ has an issue in which an attacker could bypass the product's App Password Protection feature...

Android Ups the Mobile Security Ante with Default TLS Encryption

A full 80 percent of Android apps are encrypting their traffic by default, according to a Transport Layer Security TLS adoption update from Google. That percentage is even greater for apps targeting Android 9 and higher, with 90 percent of those encrypting traffic by default, the tech giant said ...

Unpatched Strandhogg Android Vulnerability Actively Exploited in the Wild

Cybersecurity researchers have discovered a new unpatched vulnerability in the Android operating system that dozens of malicious mobile apps are already exploiting in the wild to steal users' banking and other login credentials and spy on their activities. Dubbed Strandhogg, the vulnerability...

Eset Mobile Security 5.2.18.0 Lock Bypass

Exploit Title: Bypassing Eset Mobile Security App Using Android's Split-Screen Feature Date: 11.11.2019 Exploit Author: Ferhat Cil linkedin:ferhatcil Vendor Homepage: Eset Version: 5.2.18.0 Tested on: Android 9.1.0.142, Android 8.1.0 Security App let's you lock your apps on your phone, but if you...

SIM Cards in 29 Countries Vulnerable to Remote Simjacker Attacks

Until now, I'm sure you all might have heard of the SimJacker vulnerability disclosed exactly a month ago that affects a wide range of SIM cards and can remotely be exploited to hack into any mobile phone just by sending a specially crafted binary SMS. If you are unaware, the name "SimJacker" has...

Google Android MNH Mobilization Vulnerability (CNVD-2019-36638)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. MNH driver is one of the MNH drivers. An elevation of privilege vulnerability exists in the MNH driver in Google Android. An attacker can exploit this vulnerability to elevate privilege...

Google Android Media framework remote code execution vulnerability (CNVD-2019-30325)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A remote code execution vulnerability exists in the Media framework component of Google Android 10. A remote attacker can exploit the vulnerability to execute code...

Information disclosure

A vulnerability in Cisco Webex Meetings Mobile iOS could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data by using an invalid Secure Sockets Layer SSL certificate. The vulnerability is due to insufficient SSL certificate validation by the affected...