IFSEC Insider is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
Smartphone manufacturers have begun issuing patches and monthly security updates for their handsets after the in response to one of the “worst Android vulnerabilities discovered to date”.
Those are the words of Joshua Drake, the security researcher who discovered the bug – called Stagefright.
LG is now following in the footsteps of Google and Samsung, who have already issued monthly security updates for their Android-based smartphones.
The Stagefright bug gives attackers access to critical content through a multimedia text message. Hackers can access phones via the SMS and delete the message without the handset user even knowing anything had happened.
The bug, which was discussed at UBM’s Black Hat conference in Las Vegas two weeks ago, exploits a virus’s ability to embed within a video file.
Zimperium, the mobile security company that employs Drake, says it doesn’t believe the vulnerability has been exploited yet but it represented a serious threat. “These vulnerabilities are extremely dangerous because they do not require that the victim take any action to be exploited,” said the company. “Unlike spear-phishing, where the victim needs to open a PDF file or a link sent by the attacker, this vulnerability can be triggered while you sleep.
“Before you wake up, the attacker will remove any signs of the device being compromised and you will continue your day as usual — with a trojaned phone.”
According to a report in Wired, all Google, Samsung, and LG models will be given monthly security updates via carriers.
HTC, Samsung and Android One are also expected to roll out security patches for their Android handsets imminently.
Free Download: The Video Surveillance Report 2023
Discover the latest developments in the rapidly-evolving video surveillance sector by downloading the 2023 Video Surveillance Report. Over 500 responses to our survey, which come from integrators to consultants and heads of security, inform our analysis of the latest trends including AI, the state of the video surveillance market, uptake of the cloud, and the wider economic and geopolitical events impacting the sector!
Download for FREE to discover top industry insight around the latest innovations in video surveillance systems.
Smartphone Manufacturers Issue Security Updates for Android Bug StagefrightSmartphone manufacturers have begun issuing patches and monthly security updates for their handsets after the in response to one of the "worst Android vulnerabilities discovered to date".
Bhavesh Kumar
IFSEC Insider | Security and Fire News and Resources
Related Topics
Securing the digital frontier: The critical role of cyber security in off-grid technologies
What’s next for AI in the security sector?
‘There is a real opportunity here for security companies to show leadership’: In conversation with Simon Giles, CEO at City Group Security
