“Google’s Messages platform just got a big boost from T-Mobile, with the carrier announcing on Monday that the RCS app will come standard on all current and future Android phones it sells.”
Vulnerabilities in Single Sign-On services could be abused to bypass authentication controls
“SAML XML injection gives attackers free rein over user accounts, although hard-to-execute bug proves real-world threat is minimal UPDATED A class of vulnerability detected in several Single Sign-On (SSO) services might allow attackers to hack into corporate systems, security researchers at NCC Grou”
Critical netmask networking bug impacts thousands of applications
“Popular npm library netmask has a critical networking vulnerability. The component gets over 3 million weekly downloads, and as of today, has scored over 238 million total downloads over its lifetime. Further, about 278,000 GitHub repositories depend on netmask.”
T-Mobile: First US network to comply with FCC’s STIR/SHAKEN protocol deadline
“For years now, US carriers have been doing their best to protect their customers against scam callers. It has gotten so bad that the government has even implemented rules against it and encouraged carriers to take the concern seriously.”
New Android malware spies on you while posing as a System Update
“New malware with extensive spyware capabilities steals data from infected Android devices and is designed to automatically trigger whenever new info is read to be exfiltrated.”
Apple releases iPhone, iPad, Watch security patch for zero-day bug under active attack
“Apple has released an update for iPhones, iPads and Watches to patch a security vulnerability under active attack by hackers. The security update lands as iOS 14.4.2 and iPadOS 14.4.2, which also covers a patch to older devices as iOS 12.5.2. watchOS also updates to 7.3.3.”
How to Transfer Your iCloud Photo Library to Google Photos
“There are many cloud storage services available today, and Apple and Google offer two of the more popular options. Switching can feel like a daunting task, but Apple makes it easy to move your iCloud library to Google Photos.”
Three billion phishing emails are sent every day. But one change could make life much harder for scammers
“Cyber criminals are sending over three billion emails a day as part of phishing attacks designed to look like they come from trusted senders.”
WARNING: A New Android Zero-Day Vulnerability Is Under Active Attack
“Google has disclosed that a now-patched vulnerability affecting Android devices that use Qualcomm chipsets is being weaponized by attackers to launch targeted attacks. Tracked as CVE-2020-11261 (CVSS score 8.”
Android apps like Gmail are crashing and ‘WebView’ may be to blame
“This afternoon, a number of Android users (self included) suddenly saw notifications pop up on their devices saying that apps had stopped running. Many of the apps throwing errors suddenly can’t be opened, and they include important ones like Gmail, a number of banking apps, Google Pay and others.”