security flaw Archives - Gizmochina

Nothing’s CMF Watch app suffers from a security vulnerability: Report

Sean — Wed, 06 Dec 2023 08:52:39 +0000

A couple of months ago, Nothing unveiled its new sub-brand CMF, which released a bunch of new products. This included the CMF Watch Pro model. However, it appears that a security vulnerability plagues the CMF Watch app that is featured on the partnered smartphone.

CMF Watch App may lack encryption, posing a security risk

The news was shared by Dylan Roussel, who is an Android developer. In a tweet, the dev claimed that Nothing is garnering attention for its glary security risks. He adds that the latest example of a vulnerability in their system comes from their new sub-brand, CMF. Apparently, the company’s CMF Watch app suffers from a major security flaw that is related to the encryption of user data. The investigations have revealed that the brand’s encryption process for the user’s email address and password is not functioning properly.

This means that the sensitive information is at risk. Dylan adds that the major security risk is still affecting the CMF Watch app, with user’s login credentials still being vulnerable. Nothing’s current app system lacks robust encryption for sensitive information, enabling easy access to decryption data with the application. This vulnerability was first discovered by Roussel back in September.

Let's talk about Nothing… again.

Before the Sunbird/Nothing chaos, I reported another vulnerability to them back in September… and another one back in August.

Let's talk about the one from September. It's about the CMF Watch app.
— Dylan Roussel (@evowizz) December 1, 2023

Nothing has worked on fixing this issue, but it seems that the encryption for the email and password are still vulnerable. The Android developer had even reached out to the brand directly, although there was no proper communication established after the first exchange. It remains to be seen how the company addresses these glaring security risks or whether it continues to become infamous for security flaws, since even the Nothing Chats feature was recently removed from the Google Play Store over security concerns.

Apple releases iOS 16.5.1 update to address security flaws

Soumyakanti — Thu, 22 Jun 2023 09:31:04 +0000

Apple has recently rolled out the iOS 16.5.1 update, aiming to fix critical security vulnerabilities discovered in the previous version. The security flaws were reportedly exploited to hack iPhones in Russia. The cybersecurity firm Kaspersky brought these issues to Apple’s attention, for which the company expressed gratitude.

Credit: MacRumors

What’s New in iOS 16.5.1 Update?

One of the security flaws allowed an app to execute arbitrary code with kernel privileges. Apple acknowledged that this issue may have been actively exploited on iOS versions released prior to iOS 15.7. The second vulnerability was related to Webkit, where processing malicious web content could lead to arbitrary code execution.

In addition to the security fixes, the update addresses an accessory issue introduced in iOS 16.5. The problem impacted users who relied on Apple’s Lightning to USB 3 Camera Adapter to charge their iPhones. With this update, users can now resume using the accessory as intended. Apple’s release notes mention that the update is recommended for all users and provides important security improvements.

Alongside iOS 16.5.1, Apple has released corresponding updates for other devices, including iPadOS 16.5.1, watchOS 9.5.2, and macOS Ventura 13.4.1. The iPad update specifically addresses the Lightning to USB 3 Camera Adapter bug, while all the updates provide general security enhancements and resolve various issues.

To ensure the security and optimal performance of your Apple devices, it is recommended to update to the latest available software versions promptly. The updates are accessible through the Settings app by following these steps:

Launch the Settings app.
Go to the General section.
Tap on Software Update.
Wait for the page to refresh.
The update will appear.
Tap on Download and Install.
Read and agree to the Terms of Service.
Keep your device connected to a power source until the update is complete.

It is worth noting that if the initial iOS 17 and macOS Sonoma betas do not include these publicly released patches, they are expected to be included in beta 2, which could be released soon.

RELATED:

(Source)

The post Apple releases iOS 16.5.1 update to address security flaws appeared first on Gizmochina.

Apple iPhone, iPads face new vulnerabilities in latest iOS & iPadOS

Sean — Thu, 27 Oct 2022 11:00:14 +0000

Apple recently released the new iOS 16.1 and iPadOS 16.1 updates for its iPhones and iPads. New updates usually bring some small bugs and glitches, but this time aaround, it appears that the new updates also come with some serious security flaws as well.

According to an Economic Times report, iPhone and iPads have been facing vulnerabilities due to the new iOS and iPadOS updates. The information arrives from an advisory by the Indian Computer Emergency Response Team (Cert-IN). This report stated that the latest iOS and iPadOS builds feature a number of new vulnerabilities that would allow hackers with malicious intent to remotely access a user’s private data, run arbitrary code and spoof the interface address. Furthermore, these hackers could possibly even run denial of service programs remotely on the victim’s iPhone or iPad.

As per Cert-IN, several iPhones from the Cupertino based giant are vulnerable to cyberattacks if they are running on iOS 16.1 and iOS 16.0.3 builds. Similarly, the security flaw also affects iPads running on iPadOS versions prior to the iPadOS 16.1 build. Due to this issue, the Apple iPhone 8 and after models are affected, while the iPad Pro Call models, iPad Air 3rd Gen and later, iPad 5th Gen and later, and even the iPad mini 5th gen and newer models are also among the list of affected devices.

Cert-IN stated that the severity of these vulnerabilities is high and is caused because of inadequate security controls in the AppleMobileFileIntegrity component among a number of other factors as well. Now, hackers could exploit these vulnerabilities by having the user open a malicious file or application. These files or apps would include harmful firmware that could help the hacker gain access to the victim’s device.

Zoom fixes security flaw that let hackers gain root access to your Mac

Sean — Tue, 16 Aug 2022 10:28:01 +0000

Zoom has just rolled out a new update for its application on Apple Mac platform. The new update patches a major security vulnerability that would allow hackers to gain deep access to one’s Mac system.

According to a ArsTechnica report, the popular cloud based video conferencing service had to patch a major security flaw that enabled people with malicious to gain root level access to one’s Mac PCs. This would let the hackers take control of their systems. Apparently, this vulnerability stemmed from the Zoom application’s auto updater software, which had root level access to the system. This software only had a signature verification system that could be easily fooled by giving your package a familiar file name.

In other words, a hacker could potentially force your app to downgrade or otherwise enable exploits as well. The security flaw was first discovered by Patrick Wardle, the Objective-See Foundation (OSF) creator and researcher. Wardle had informed Zoom regarding this vulnerability back in December 2021. Now, the company has officially fixed this issue, although, the patch also brought another bug as well.

However, this was also soon fixed by Zoom, but Wardle found yet another bug in the application which was just recently patched as well. Notably, this isn’t the first time Zoom faced security related issues with its platform for the Mac systems. The company also had to quickly fix a webcam hijack exploit back in 2019, which lead to rise in criticism of the software, especially in 2020 when the app exploded in popularity.

Google Pixel 6a fingerprint scanner suffers from a major security flaw

Sean — Mon, 25 Jul 2022 11:27:28 +0000

Google is set to unveil its only Pixel 6 series smartphone in India later this month. However, prior to its July 28 release, the Pixel 6a model is apparently suffering from a major security flaw.

The news arrives from known Indian tech YouTubers GeekyRanjit and Beebom who found the security issue in their videos. The security flaw was also confirmed separately by 91Mobiles as well. As of right now, it is unclear whether the bug is related to the software or hardware. But, the Pixel 6a can basically be unlocked with fingerprints that are not even registered in the device. To put things simply, the in display fingerprint scanner is not functioning as intended, which shows a major security flaw.

In one of these videos, we can see multiple different people being capable of unlocking the Pixel 6a. So if your device gets lost or stolen, any other person can gain access to the smartphone. This is a big issue especially for the Search Engine giant, who is selling a smartphone after a gap of two years. Furthermore, the handset isn’t exactly affordable, with its price tag of 43,999 INR (roughly 550 US Dollars).

Pixel 6a in display fingerprint scanner

Talking about the smartphone itself, it sports a 6.1 inch Full HD+ OLED display that supports HDR. The Pixel 6a is also equipped with the company’s proprietary Tensor chipset that is paired with 6GB of RAM and 128GB of internal storage. It is powered by a 4,306mAh battery pack that also supports 18W fast charging. For photography, the device features a 12.2 megapixel dual camera setup on the rear and an 8 megapixel selfie shooter.

Smartphones with Unisoc SoCs have a critical vulnerability, fix in works

Sudhanshu — Thu, 02 Jun 2022 18:50:48 +0000

China-based semiconductor firm Unisoc has recently come to prominence with multiple major manufacturers using its SoCs in their budget range devices. Now, Check Point Research has revealed that the Unisoc smartphone chips have a critical security vulnerability.

According to the firm, The issue exists in the modem firmware and affects 4G and 5G Unisoc chipsets. The issue, tracked as CVE-2022-20210, was discovered while scanning Non-Access Stratum (NAS) message handlers. This vulnerability could be exploited to neutralize or block the cellular communication capabilities of the device.

Slava Makkaveev, Reverse Engineering and Security Research attorney at Check Point Software said “An attacker could have used a radio station to send a malformed packet that would reset the modem, depriving the user of the possibility of communication. Left unpatched, cellular communication can be blocked by an attacker.”

The vulnerability was detected on a Motorola Moto G20 running the Unisoc T700 chipset and Android January 2022 security patch. The vulnerability, however, exists on other devices using Unisoc chipsets too. Check Point Research disclosed its findings to Unisoc in May. The China-based chipmaker acknowledged the vulnerability upon the receipt of disclosure and issued a patch.

Makkaveev also stated that “There is nothing for Android users to do right now, though we strongly recommend applying a patch that will be released by Google in their upcoming Android Security Bulletin.” So, it is advisable to update your Unisoc SoC smartphones to the latest software version when the next patch arrives.

Apple iPad Pro with M1 chips have an irreparable security flaw

Sean — Thu, 27 May 2021 08:54:48 +0000

The propriety M1 Chip from Apple has already made its way to a number of the company’s products. This includes MacBooks, iMacs, iMac mini, and even the iPad Pro. Now, a new report has found that the iPad Pro with the company’s silicon has an irreparable security flaw.

According to developer Hector Martin (Via PhoneArena), the M1 based iPad Pro suffers from a vulnerability that exists on a hardware level of the M1. In other words, this is an issue that cannot be fixed through a simple software update. The Cupertino based giant has apparently violated an Arm architecture specification requirement as well. This means that there is no simple method of fixing the issue.

The developer further explained that the flaw basically allows two applications to covertly exchange data without using normal operating system features. While this is a vulnerability, it, fortunately, does not pose any serious security risks. Even in a worst case scenario this security risk would only enable advertisers for cross app tracking and can not be used by hackers to take control of one’s device or even steal sensitive information. Although, the flaw still violates the OS security model.

Furthermore, this issue affects every M1 device, which means it could even affect the iPhone 12 series as well since the A14 Bionic is based on the same CPU microarchitecture. The developer said that the only way of fixing this is to run the entire operating system as a virtual machine (VM). But that is not exactly a feasible repair to the issue. Hector believes that the flaw could even affect the next generation M1X chipset as well, but will be fixed in the following generation in the future.

Huawei forced to fix critical flaws in its equipment by British Intelligence

Sean — Fri, 02 Oct 2020 07:43:31 +0000

Huawei Technologies has recently been forced to fix a major flaw in its products by the British Intelligence, which put the security of the country’s networks at risk, as per a government agency.

The UK government found a “Critical, user-facing vulnerabilities” in the system regarding the Chinese telecommunications giant’s fixed-broadband products. The issue was caused by poor code quality and an old operating system, according to Huawei Cyber Security Evaluation Centre Oversight Board. This center was built by the company alongside the government in an arrangement to let the British National Cyber Security Centre examine its hardware and software.

Since then, an annual report from HCSEC Oversight Board has stated that the security issue has been cleared and as such, no exploitations were detected. However, the fix also created a new and “major issue,” which is said to be caused by the “deficiencies in Huawei’s engineering processes remain.” The report from SCMP mentioned the event had “national significance,” and being a rare occasion where a full description of the problem was temporarily withheld from Huawei as the impact was assessed.

Notably, the discovery of the critical flaw arrived during the time when the British government had decided to ban the Chinese company from supplying the nation with equipment for 5G networking. The government is also currently reviewing its role in supplying fixed-broadband infrastructure. The HCSEC Oversight Board stated that it “can only provide limited technical assurance in the security risk management of Huawei equipment in UK networks.”

The post Huawei forced to fix critical flaws in its equipment by British Intelligence appeared first on Gizmochina.

Microsoft rolls out emergency updates to fix Security flaws on Windows 10

Sean — Wed, 01 Jul 2020 09:55:58 +0000

Microsoft has recently rolled out two emergency updates that fix certain security flaws in its Windows 10 and Windows Server operating systems. This update arrives just two weeks earlier than its regular Tuesday Patch cycle.

According to Microsoft, the flaws had not been publicly revealed so its chances of exploitation were low, but regardless, the company hurried to patch the vulnerabilities that affected both platforms rather than waiting for the July 14 update cycle. The security flaws in question have been labeled as CVE-2020-1425 and CVE-2020-1457, which allow exploiters to execute arbitrary code and take control of the affected computer.

Apparently, these flaws existed due to the way Windows Codecs Library handles objects in memory. In other words, a potential attacker could hack into a system by using a crafted image file that would need to launch on the targeted computer. The company also revealed the list of the versions of operating systems that suffered from this issue, which includes:

Windows 10 version 1709
Windows 10 version 1803
Windows 10 version 1809
Windows 10 version 1903
Windows 10 version 1909
Windows 10 version 2004
Windows Server 2019
Windows Server version 1803
Windows Server version 1903
Windows Server version 1909
Windows Server version 2004

The security flaws were first reported to the company by Trend Micro Zero Day Initiative security researcher Abdul-Aziz Hariri. Users can now download the update from the Microsoft Store in the forms of patches that will update the Windows Media Codec. Although, these updates have been sent out automatically as well.

(Via)

The post Microsoft rolls out emergency updates to fix Security flaws on Windows 10 appeared first on Gizmochina.

Apple iPhone’s Mail App suffers from a severe security flaw, Company declined to comment

Sean — Thu, 23 Apr 2020 09:58:00 +0000

A new vulnerability might have just been found in Apple iPhones. Security researchers have claimed that the default iOS Mail app suffers from a severe security flaw and is vulnerable to attacks from hackers.

According to a report from ZecOps, the vulnerability is already being exploited “in the wild” and that it is an advanced threat that Apple is unaware of. The research agency believes that at least 6 high profile targets have been exploited so far, including a Japanese mobile carrier executive and other “individuals from a Fortune 500 company in North America.”

ZecOps have refrained from mentioning names stating privacy reasons but said that it was unable to obtain the malicious code since the emails were remotely deleted by hackers. The firm believes that the vulnerability is related to 2 zero-day iOS exploits that have existed in the Mail app since at least iOS 6, which was launched back in 2012.

According to ZecOps, “the attack’s scope consists of sending a specially crafted email to a victim’s mailbox enabling it to trigger the vulnerability in the context of iOS MobileMail application on iOS 12 or mailed on iOS 13.” However, the method to reproduce this vulnerability has failed so far by various other researchers. This includes Jann Horn and Maddie Stone from Google’s Project Zero cybersecurity program.

@ZecOps your writeup says "The suspicious events included strings commonly used by hackers (e.g. 414141…4141).", but that's also what it looks like when you just base64-encode nullbytes; and this is MIME parsing, so you're likely to see base64-encoded data

— Jann Horn (@tehjh) April 22, 2020

Notably, Apple was reached out from Beijing News reported in China to verify the report from ZecOps, regarding the vulnerability the iOS mail app faces on iPhones. Unfortunately, Apple China declined to comment on the situation so we have no official confirmation. Other researchers are currently asking ZecOps to provide more details on how to recreate the vulnerability to actually prove the security flaw’s existence.

(Via:1,2)

The post Apple iPhone’s Mail App suffers from a severe security flaw, Company declined to comment appeared first on Gizmochina.

OnePlus 6 Serious Flaw Makes It Easy For Anyone To Take Control Of The Device

Michele Ingelido — Sun, 10 Jun 2018 18:41:31 +0000

Security on Android phones is never an assurance, but this time the red line zone has been passed. A new flaw has been discovered on the OnePlus 6: it can enable anyone to take total control of the device easily. The flaw is with regards to the bootloader and in order to take advantage of this flaw, you just need the physical access to the device and a PC. It has been discovered by Jason Donenfeld, an XDA member and president of Edge Security LLC. If you have some basic idea of Android modding, then you might know that the standard bootloader installed on smartphones prevents installing custom ROMs on the device.

But due to the big flaw, the bootloader of the OnePlus 6 allows installing every customized system image, even though the bootloader is locked. To do so, the user needs physical access to the device and it has to be connected to the PC at least once. Then, you just need to boot the phone through the fastboot mode and flash the customized image. You can even install custom recoveries such as TWRP and obtain root access, and if you do so, there will be no usage limits.

So, if you own a unit of the OnePlus 6 and you actually lose your device or someone steals it, he can easily take total control of it and delete all of your data. After the discovery, OnePlus has been alerted and it has already released a statement on the matter. Here are the words spoken by the company:

We take security seriously at OnePlus. We are in contact with the security researcher, and a software update will be rolling out shortly.

A software update for the OnePlus 6 to fix the big flaw should arrive soon, but in the meantime make sure not to lose your device!

(Source)

The post OnePlus 6 Serious Flaw Makes It Easy For Anyone To Take Control Of The Device appeared first on Gizmochina.