IMP4GT: IMPersonation Attacks in 4G NeTworks

The researchers who disclosed the aLTEr attack last year (David Rupprecht, Thorsten Holz, and Christina Pöpper), have found new ways to exploit the lack of integrity protection on the 4G/5G user plane in a new attack called Imp4Gt.

Continue reading “IMP4GT: IMPersonation Attacks in 4G NeTworks”

TikTok fixed several vulnerabilities that could allow hijacking of any account

Security experts from CheckPoint discovered multiple vulnerabilities in the popular TikTok app that could be chained by remote attackers to hijack any user accounts, execute malicious code on the target system and perform unwanted actions.

Continue reading “TikTok fixed several vulnerabilities that could allow hijacking of any account”

A new Android vulnerability (CVE-2019-2234) allows attackers to hijack Camera App

Researchers from Checkmarx Security Research Team has discovered and disclosed a vulnerability [2] in Android camera app that may allows a malicious app to bypass camera access permissions.

Continue reading “A new Android vulnerability (CVE-2019-2234) allows attackers to hijack Camera App”