CVE-2024-31318

In CompanionDeviceManagerService.java, there is a possible way to pair a companion device without user acceptance due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2024-23966 · Unknown · Companiondevicemanagerservice

Name of the Vulnerable Software and Affected Versions: CompanionDeviceManagerService affected versions not specified Description: The issue is related to a missing permission check in CompanionDeviceManagerService.java, allowing a companion device to be paired without user acceptance. This could...

Essays from 7 Experts on Moving to a Cloud-Based Endpoint Security Platform

Carbon Black recently published a series of essays about the experiences of experts in the field on information security as they moved their endpoint security program to the cloud; this is one of those essays. To read the full series check out 7 Experts on Moving to a Cloud-Based Endpoint Securit...