Google has introduced a new security feature in Android 16 aimed at combating telephone-oriented attack delivery (TOAD) scams. This feature prevents scammers from altering critical settings, such as sideloading apps and changing accessibility permissions, while users are on a phone call. The initiative comes in response to a rising trend of scams that exploit phone calls to deliver malicious software. In addition, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added several vulnerabilities to its Known Exploited Vulnerabilities catalog, including flaws in Apple iOS and iPadOS, Mitel SIP Phones, and a critical vulnerability in SimpleHelp. Furthermore, Google has released updates to address vulnerabilities in its products, including a flaw with a CVSS score of 9.9 in Ivanti's Connect Secure, Policy Secure, and Cloud Services Application. These developments highlight ongoing efforts to enhance cybersecurity amid increasing threats.
Two zero-day flaws are among the 56 security vulnerabilities @Microsoft addressed with its Patch Tuesday update for February. #cybersecurity #infosec #ITsecurity https://t.co/SgZWUJTdvS
Un experto en seguridad revela el siniestro lugar donde los estafadores consiguen y revenden tu número del móvil https://t.co/hUS3gDDBEo 👈
Not only new vulnerabilities are exploited in the wild. At the start of Feb, @CISACyber added CVE-2018-19410 Paessler PRTG Network Monitor Local File Inclusion Vulnerability (CVSS 9.8) to its KEV list. We scan/report vulnerable IPs daily, with 2149 found on 2025-02-15. https://t.co/sqagNd4D9W