Zum Inhalt der Seite gehen

Suche

Beiträge, die mit zerodays getaggt sind

[Important Update] Google patches two Android Zero-Days used in targeted Attacks. :android:

Google fixed two actively exploited Android zero-day flaws as part of its November security updates, addressing a total of 51 vulnerabilities. Tracked as CVE-2024-43047 & CVE-2024-43093, the two issues are marked as exploited in limited, targeted attacks.

https://source.android.com/docs/security/bulletin/2024-11-01

#google #android #update #zerodays #it #security #privacy #engineer #media #tech #news
The security issues fixed this month impact Android versions between 12 and 15. • The CVE-2024-43047 flaw is a high-severity use-after-free issue in closed-source Qualcomm components within the Android kernel that elevates privileges. The flaw was first disclosed in early October 2024 by Qualcomm as a problem in its Digital Signal Processor (DSP) service. • CVE-2024-43093 is also a high-severity elevation of privilege flaw, this time impacting the Android Framework component and Google Play system updates, specifically in the Documents UI. Google did not disclose who discovered the CVE-2024-43093 vulnerability. To apply the latest update, head to Settings > System > Software updates > System update. Alternatively, go to Settings > Security & privacy > System & updates > Security update. A restart will be required to apply the update.
#android #news #privacy #zerodays #google #tech #media #security #it #engineer #update

Reading #thePrecipie by #tobyOrd

Finally got to the bit about #AI threat. Model relies on 'outbreak', from one machine to many.

But takeover of high power machines will presumably be noticed. Seems like outbreak presupposes excellent decentralized computation

Makes me think that 'alignment' people would do well to turn AI to ethical #pentesting and fix all the #zerodays
#ai #theprecipie #tobyord #pentesting #zerodays

⇧