Critical Android Vulnerabilities are Patched by Google.

Few critical remote code execution vulnerabilities are addressed in the July update.

The most severe flaws allow attackers to execute code with high privileges using a special file. One of them is impacting Android 8.0+ (CVE-2020-0224), another affects Android 10(CVE-2020-0225).

Another critical flaw in Android 10(CVE-2020-0107) is an information disclosure vulnerability.

In addition to critical flaws Google is patching bunch of high severity issues, such as privilege escalation in the framework, issues in WLAN and Qualcomm kernel.

QBot attacks: new “old” ransomware.

Qbot (a.k.a Quakbot, Qakbot, Pinkslipbot) is a famous banking trojan. In June 2020 over 36 U.S. and Canada financial institutions, including Citibank, Bank of America, JP Morgan, were targeted. Stealing banking credentials and financial data via browser hiacking, deploying backdoors to access targeted machines, this is not only impact that these attacks have.

Ransomware tools and techniques are continuously evolving and companies need to prepare better updating and patching critical software, implement more security measures for detection or blocking backdoors (firewall, IDS etc.)  

Cisco fixed critical flaws in WebEx.

Cisco release an update fixing two high-severity flaws in the Cisco WebEx Meetings Desktop App. Vulnerabilities could allow attackers to run code or programs on the targeted machine if exploited.

CVE-2020-3342, remote code execution vulnerability, was found in the macOS client. It could allow unauthenticated attacker to remotely execute arbitrary code due to inappropriate certificate validation.

CVE-2020-3263, arbitrary program execution flaw, was found in the Windows client, could allow remote execution of the arbitrary program.

Update was released and available for all Cisco users.

*pic Google Play

Catching the market demand Zoom promises end-to-end encryption for all users.

Saying previously that end-to-end encryption will be available only for paid accounts, Zoom decided to change a strategy promising it to all users.

Company said that beta-version will be available in July. New feature will be set manually by user while creating a meeting, it will be off by default.

It was a long discussion inside the company, but seeing that Facebook and Apple implementing this security measure, Zoom didn’t have too much choice.

BlueJeans Collaboration Tool: New Security Features.

During the COVID-19 lockdown collaboration tools became part of the normal life routine. At the same time, it seems, attacks on them also became extremely popular.

Companies are working on the security features implementation and improvement since the beginning of pandemic.

BlueJeans announces few new security features recently, such as restricted meetings, meeting lock, screen share controls, AES-256 (!) encryption and more.

BlueJeans is a software company bought by Verison earlier this year and is not so popular still as other videoconferencing tools.

*picture: BlueJeansSupport

Snake Ransomware: Who is a Target?

Ransomware attacks gained a lot of interests during the last few months. More often we see new ransomware used and this time it’s a Snake Ransomware is crawling to target industries.

In the beginning of 2020 Industrial Control Systems (ICS), mostly GE’s, were targeted by Snake. After we observed attacks of the healthcare service. Now we see that Honda operation based on the U.S., India, Japan and Europe were attacked by this ransomware.

Who is next?

Facebook is testing Face ID authentication.

Facebook is testing a new feature for Messenger App: Face ID This feature can add security measures to the app requiring Face ID or Touch ID authentication. Before accessing mailbox or send messages Facebook users would need to authenticate themselves using more secure identity verification. It will prevent not authorized access to the app.

New feature also will allow users to set authentication requirements, such as how long do they want to be logged without a new request.