Google Archives - Page 7 of 12 - Cyber Security Minute

Android App Developers Required by Google to Share More Info on Data Handling

Issued by: Security Week

Planned as a safety section in Google Play, the change is expected to “help people understand the data an app collects or shares, if that data is secured, and additional details that impact privacy and security.” Google is already asking developers to say whether their application is collecting user data, but the new requirement will…

Network Security

Google Broke Australian Law Over Location Data Collection: Court

Issued by: Security Week

The US company faces potential fines of “many millions” of dollars over the case, which was brought by the Australian Competition and Consumer Commission (ACCC), the regulators’ chief Rod Sims said. The federal court found that in 2017 and 2018 Google misled some users of phones and tablets featuring its Android operating system by collecting…

Vulnerabilities

Google Project Zero Announces 2021 Updates to Vulnerability Disclosure Policy

Issued by: Security Week

Project Zero has announced three major changes to its vulnerability disclosure policy in 2021, compared to 2020. Until now, if Project Zero researchers found a security hole in a product, it was disclosed after exactly 90 days, regardless of when a patch was released or whether a patch was available at all. The impacted vendor…

Malware & Threats

Google Patches Critical Code Execution Vulnerability in Android

Issued by: Security Week

Tracked as CVE-2021-0430 and affecting Android 10 and 11, the code execution vulnerability is deemed critical severity. The bug was patched as part of the 2021-04-01 security patch level. “The most severe of these issues is a critical security vulnerability in the System component that could enable a remote attacker using a specially crafted file…

Vulnerabilities

Chinese Researchers Earn Another $20,000 for Chrome Sandbox Escape

Issued by: Security Week

Google informed Chrome users on Tuesday that an update for version 89 includes eight security fixes, including for six vulnerabilities reported by external researchers. The highest reward, $20,000, was awarded to researchers Leecraso and Guang Gong of the 360 Alpha Lab at Qihoo 360. The issue was described by Google as a use-after-free in screen…

Software Security

Google Partners With Insurers to Create Risk Protection Program

Issued by: Dark Reading

Google has teamed up with two major cyber-insurance providers, Allianz Global Corporate and Specialty (AGCS) and Munich Re, to create the “Risk Protection Program” for Google Cloud users. The program introduces a new Google Cloud security tool called Risk Manager, which gives businesses the ability to measure and manage their risk via Google Cloud and…

Malware & Threats

Attackers Turn Struggling Software Projects Into Trojan Horses

Issued by: Dark Reading

On Dec. 4, users of a simple Android program — a barcode scanner — started witnessing odd behavior when their smartphones suddenly began opening up their browser to display unwanted advertisements. While the devices exhibited the hallmarks of a malware or adware infection, the compromises puzzled most users since they had not recently downloaded new…

Vulnerabilities

Google Discloses Details of Remote Code Execution Vulnerability in Windows

Issued by: Security Week

The flaw, tracked as CVE-2021-24093, was patched by Microsoft on February 9 with its Patch Tuesday updates. Dominik Röttsches of Google and Mateusz Jurczyk of Google Project Zero have been credited for reporting the issue to Microsoft. A CVSS score of 8.8 has been assigned to the vulnerability, but Microsoft has rated it critical for…

Software Security

Google Funds Linux Kernel Security Development

Issued by: Security Week

With this funding, Silva and Chancellor will dedicate their work to improving kernel security, as well as to associated initiatives, so that the open source software project remains sustainable in the long run. The pervasive Linux operating system, according to a recent report from the Linux Foundation’s Open Source Security Foundation (OpenSSF) and the Laboratory…

Vulnerabilities

Google Launches Database for Open Source Vulnerabilities

Issued by: Security Week

OSV should make it easier for the users of open source software to find out which vulnerabilities impact them. It can also help maintainers of open source software accurately identify all versions and commits impacted by a flaw across all their branches. Google OSVFor consumers, Google says OSV provides a database that can be easily…