{"id":10475,"date":"2016-08-09T12:19:43","date_gmt":"2016-08-09T12:19:43","guid":{"rendered":"http:\/\/www.biphoo.com\/bipnews\/?p=10475"},"modified":"2016-08-09T12:19:43","modified_gmt":"2016-08-09T12:19:43","slug":"new-security-vulnerability-puts-android-devices-at-risk","status":"publish","type":"post","link":"https:\/\/www.biphoo.com\/bipnews\/technology\/security\/new-security-vulnerability-puts-android-devices-at-risk.html","title":{"rendered":"New Security Vulnerability puts Android Devices at Risk"},"content":{"rendered":"

New Security Vulnerability puts Android Devices at Risk<\/span><\/strong><\/h2>\n

New security vulnerability puts 900 million Android devices at risk, researchers warn<\/strong> :<\/span>Security firm Check Point has identified vulnerabilities affecting 900 million smartphones and tablets that use chipsets from component maker Qualcomm.<\/span><\/p>\n

Check Point disclosed the vulnerabilities Sunday at the DEF CON 24 hacking conference in Las Vegas. The four vulnerabilities, dubbed \u201cQuadRooter\u201d by Check Point, affect Android devices using chipsets from component maker Qualcomm. Chipsets are collections of components or circuits that handle data flow within a device.<\/span><\/p>\n

If any one of the vulnerabilities is exploited, an attacker could gain access to the device, explained Check Point, in a blog post. \u201cAny Android device using these chipsets is at risk,\u201d it added.<\/span>
\n<\/a><\/p>\n

An attack could exploit the vulnerabilities in the chipsets\u2019 software drivers using a malicious app. \u201cSince the vulnerable drivers are pre-installed on devices at the point of manufacture, they can only be fixed by installing a patch from the distributor or carrier,\u201d Check Point said.<\/span><\/p>\n

Check Point says the situation highlights the inherent security risks in Google’s Android operating system. \u201cCritical security updates must pass through the entire supply chain before they can be made available to end users,\u201d it said. \u201cOnce available, the end users must then be sure to install these updates to protect their devices and data.\u201d<\/span><\/p>\n

A spokesman for Check Point told FoxNews.com there is no evidence that QuadRooter has been used in a cyberattack. However, only three of the four \u2018critical\u2019 QuadRooter patches have been fixed, he added.<\/span><\/p>\n

\u201cWe appreciate Check Point’s research as it helps improve the safety of the broader mobile ecosystem,” a Google spokesman told FoxNews.com, via email. “Android devices with our most recent security patch level are already protected against three of these four vulnerabilities.”<\/span><\/p>\n

The fourth vulnerability, CVE-2016-5340, will be addressed in an upcoming Android security bulletin, Google added, noting that the company’s Android partners can take action sooner by referencing a “public patch” provided by Qualcomm.<\/span><\/p>\n

Qualcomm told FoxNews.com that it was notified about the vulnerabilities between February and April\u00a0 2016, and made patches for all four vulnerabilities available between April and July.<\/span><\/p>\n

Android devices containing the vulnerable chipset technology include the BlackBerry Priv, Google\u2019s Nexus 5X, Nexus 6 and Nexus 6P and Samsung\u2019s Galaxy S7 and S7 Edge, according to CheckPoint.<\/span><\/p>\n

“BlackBerry is aware of the Quadrooter flaws and the vulnerabilities that affects the majority of Android devices,” said BlackBerry, in a statement emailed to FoxNews.com. “A fix for BlackBerry\u2019s Android devices was integrated and tested in our labs immediately after the report was received and we will expedite it to customers as soon as possible.”<\/span><\/p>\n

The phone maker said that it is not aware of any exploits for the vulnerability “in the wild” and does not believe that any customers are currently at risk.<\/span><\/p>\n

Samsung has not yet responded to a request for comment on this story from FoxNews.com.<\/span><\/p>\n

Check Point is offering a free QuadRooter scanner app on Google Play that can test devices for the vulnerability.<\/span><\/p>\n

This is not the first time that Android has been thrust into the security spotlight. Last year the Stagefright flaw in Android\u2019s multimedia processing sparked concern and prompted fixes from Google, carriers and smartphone makers.<\/span><\/p>\n

Manufacturers are ramping up their efforts around mobile device security. Last week, for example, Samsung unveiled its Galaxy Note7 phone, which offers iris-scanning technology to unlock the Android device.<\/span><\/p>\n

Source<\/strong> <\/span>: http:\/\/www.foxnews.com\/tech\/2016\/08\/08\/new-security-vulnerability-puts-900-million-android-devices-at-risk-researchers-warn.html<\/span><\/p>\n

\n\t\t\t
\n\t\t\t <\/div><\/div>\n\t\t