Browsing: Flaw

Hotel and resort giant Wyndham acknowledged a cybersecurity incident after a researcher discovered a hardcoded password in its Android application

A newly disclosed Android bug called GhostMap can push a phone into a crash loop that survives restarts, and Google has not released a fix. Researchers at Bitdefender say a specially built app only has to be installed, never opened, and needs no permissions at all.[1][2] Nobody has been seen using it against real victims…

Bitdefender Labs researchers found a flaw in Android’s parsing of ZIP entries that can leave phones stuck in a crash loop after a crafted app is installed. The app needs no permissions and no launch; recovery may require a factory reset.

A newly identified Android exploit may cause your phone to enter a crash loop without you even opening any malicious apps. The process is called GhostMap, and it was identified by researchers at antivirus company Bitdefender when working on a separate flaw.

Google has fixed a critical Android security flaw that could allow hackers to take over a phone without the user clicking or approving anything. The most severe bug lies in media-processing code that generates preview images. Nearly half of active Android devices will never receive the patch.

Bitdefender Labs researchers found that installing a specially crafted app can leave an Android phone stuck in a crash loop, even if you never open it or grant it a single permission. The app contains no code and never needs to run.  

Apple announced the bug could have allowed attackers to run their code of choice on a compromised device.

Apple has released updates for iPhones, iPads, and Macs to fix a flaw that could let an attacker run code when a device processes a malicious file. Apple says it may have been used in highly targeted attacks against iPhone users running versions of iOS before iOS 27.