Free App Scans Android Devices For Vulnerabilities

An American company has developed a free open source app that scans Android devices for vulnerabilities. According NowSecure it often happens that manufacturers do sometimes months to close serious security holes like Stage Fright in their version of Android.

Vulnerabilities can be present in many parts of Android. In the case of vulnerabilities in the kernel, according NowSecure difficult to control this without causing system instability. Something in the Android Vulnerability Test Suite account is held with. The app scans on several major vulnerabilities. All data while keeping within the device and be shared with anyone.Also, the source code of the app via Google Play is available for download at GitHub to see.

Serious Leak In Keyboard Software Samsung Smartphones

Researchers at the keyboard software installed on many Samsung smartphones found a vulnerability that could allow an attacker who between users and the Internet is to execute arbitrary code with system privileges on the device. Samsung Galaxy S phones, including the Mini S4, S4, S5 and S6 are standard version of Swiftkey keyboard.

This software runs with standard system privileges and regularly checks for updates. However, monitoring will take place over HTTP, which means that it is vulnerable to man-in-the-middle attacks. An attacker who can intercept this update checks and then offering a malicious update can execute arbitrary code as the camera with system privileges. Even if the software is used can not still be attacked, according to researchers from NowSecure . Who published a web page where users can check whether they are vulnerable. According to the researchers, the problem is present at about 600 million sets.

The CERT Coordination Center ( CERT / CC ) at Carnegie Mellon University suggests that the probability of an attack, depending on how often the software checks for updates, it is possible small. Samsung has now released a firmware update for telecom providers. In case users do not receive over-the-air update is still advised to avoid unreliable networks including open Wi-Fi networks. The use of unreliable networks increases the chance of becoming a victim of a man-in-the-middle attack, according to the CERT / CC.