CVE-2017-15351

The 'Find Phone' function in Huawei Honor V9 play smart phones with versions earlier than Jimmy-AL00AC00B135 has an authentication bypass vulnerability. Due to improper authentication realization in the 'Find Phone' function. An attacker may exploit the vulnerability to bypass the 'Find Phone'...

Kotlin-based malicious apps penetrate Google market

An open-source programming language, Kotlin is a fully-supported official programming language for Android. Google boasts that Kotlin contains safety features in order to make apps "healthy by default." Many apps are already built with Kotlin, from the hottest startups to Fortune 500 companies...

Parallel Space - Multiple accounts & Two face - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Parallel Space - Multiple accounts & Two face published at the 'play' market has multiple vulnerabilities...

Google Expands Play Marketplace Bug Bounty Program

UPDATE Google is expanding the number of bounties available in its Google Play Security Reward Program, a step that comes amid a flurry of mitigation activities against malicious apps found in its official marketplace. The company introduced the program in October, in a long-awaited move...

Google Booted 700,000 Bad Apps From Its Marketplace in 2017

Google set the record straight on Android security Tuesday, announcing that in 2017 it booted 700,000 apps from Google Play for violating marketplace policies. In a blog post titled “How we fought bad apps and malicious developers in 2017,” Google outlined efforts made over the last 12 months to...

Information Disclosure

Play Framework filter-helper is vulnerable to information disclosure. Attackers can overwrite the Vary header when the CORS filter is used to match again a specific set of origins. This may expose sensitive information and make the application vulnerable to cache poisoning...

A week in security (January 15 – January 21)

Last week on Labs, we gave you some background information about cookies, specifically which ones to worry about and why. We also warned you about scams surrounding the Mega Millions winner, who promised to donate his money to good causes. We analyzed a cryptocurrency miner using a very old...

Android Malware in gaming apps on Play Store downloaded 4 million times

By Waqas Just another day with just another Android malware targeting unsuspecting This is a post from HackRead.com Read the original post: Android Malware in gaming apps on Play Store downloaded 4 million times...

Facebook Hacking Android Malware GhostTeam Found in 53 Play Store Apps

By Waqas Another day, another Android malware targeting those who download apps This is a post from HackRead.com Read the original post: Facebook Hacking Android Malware GhostTeam Found in 53 Play Store Apps...

Facebook Password Stealing Apps Found on Android Play Store

Even after many efforts made by Google last year, malicious apps always somehow manage to make their ways into Google app store. Security researchers have now discovered a new piece of malware, dubbed GhostTeam, in at least 56 applications on Google Play Store that is designed to steal Facebook...

МТС Банк - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application МТС Банк published at the 'play' market has multiple vulnerabilities...

A week in security (January 8 – January 14)

It's very early in the year, yet everyone has already had a complete meltdown pun intended over a number of serious vulnerabilities found in legacy and modern microprocessors. Last week, rightly so, vendors released patches for hardware and OSes to help mitigate these threats. However, problems i...

60 Android apps for kids found infected with Pornographic malware

By Waqas There is nothing surprising about Play Store hosting malware which This is a post from HackRead.com Read the original post: 60 Android apps for kids found infected with Pornographic malware...

Malware infected fake Telegram Messenger app found in Play Store

By Waqas The Google Play Store is home to more than 3.5 This is a post from HackRead.com Read the original post: Malware infected fake Telegram Messenger app found in Play Store...

Apps Exposing Children to Porn Ads Booted From Google Play

Sixty app were removed from the Google Play marketplace in December that were infected with malware dubbed AdultSwine that in some cases generated pornographic ads on apps aimed at children. The developers behind the malicious apps also scammed victims with scareware techniques and attempted to...

Unauthorized access vulnerability in Xiaomi Box

Xiaomi Box is a high-definition Internet TV box. Xiaomi Box suffers from an unauthorized access vulnerability, which is due to the failure of the Xiaomi Box server to verify authorization for service access. An attacker can use this vulnerability to install and uninstall applications, play...

Android Malware written in Kotlin found on Play Store stealing data

By Waqas Just another day with just another Android malware hosted on This is a post from HackRead.com Read the original post: Android Malware written in Kotlin found on Play Store stealing data...

Hundreds of Android Gaming Apps are Tracking Your TV Viewing Habits

By Waqas There are more than 250 Android gaming apps on Google Play This is a post from HackRead.com Read the original post: Hundreds of Android Gaming Apps are Tracking Your TV Viewing Habits...

Fake Android apps caught dropping Coinhive miner

By Waqas In October last year, three Android apps on Play Store This is a post from HackRead.com Read the original post: Fake Android apps caught dropping Coinhive miner...

January 5, 2017 – Morning Cyber Coffee Headlines – “Monopoly” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! January 5, 2018 - Headlines Carbon Black in the News: Cybersecurity news round-...