Do you know what’s worse than finding out your phone has serious vulnerabilities? Discover that one of the vulnerabilities is actively exploited by attackers. In the latest monthly Pixel update, Google noted that CVE-2024-32896 “may be subject to limited and targeted exploitation.” The zero-day exploit (which simply means the vulnerability was unknown to the phone manufacturer and no patches or patches were available when it was discovered) was listed in the Pixel update bulletin as “high gravity”.
According to Forbes, this vulnerability made the US government so nervous that it ordered all federal employees with a Pixel phone to update their phones by July 4 “or stop using the product.” Although the warning is aimed at US government agencies, businesses may want to follow suit; Even people who use company Wi-Fi to connect to the Internet should install the latest security update as soon as possible.
The US government’s warning comes from the Known Exploited Vulnerabilities (KEV) lists maintained by the Cybersecurity and Infrastructure Security Agency (CISA). The advisory stated: “Android Pixel contains an unspecified vulnerability in the firmware that allows escalation of privilege.” Privilege escalation would allow an attacker to use an application to capture information that would not normally be available to the malicious actor.
GrapheneOS releases more information on security update
Even though the US government seems to be focusing on Pixel users, GrapheneOS says the vulnerability doesn’t just affect Pixel users. Graphene OS states: “This was fixed on Pixels with the June update (Android 14 QPR3) and will be fixed on other Android devices when they are finally updated to Android 15. If they don’t not update to Android 15They probably won’t get the fix because it hasn’t been backported.”
To update your Pixel, go to Settings > System > Software updates and if you have a pending update, just follow the instructions. In a situation like this, we suggest all Pixel users, whether they work for the US government or not, update their phones immediately.
News Source : www.phonearena.com
Gn tech
