One click account vulnerability in the TikTok Android app

The Microsoft Security Blog is reporting on a flaw discovered in the Android TikTok app that would potentially allow threat actors to take over the user’s account with them clicking on a malicious link. Vulnerability in TikTok Android app could lead to one-click account hijacking – Microsoft Security Blog Remember …

Android 13 privacy settings

Following yesterday’s story that threat actors have already compromised Android 13’s security setting, here is a good news story about how Android 13 with help protect your privacy: The Android 13 Privacy Settings You Should Update Now | WIRED UK

Android malware has already circumvented new OS security features

Android devices

Threat actors invest time and effort into beating security measures, especially when the targets are so profitable. Android users have proven to be lucrative targets: Malware devs already bypassed Android 13’s new security feature (bleepingcomputer.com) Make sure you have policies and procedures in place if your team are BYODing Android …

Who decides who the good guys are? Don’t worry though NSO only sells it’s spyware to approved governments and law enforcement agencies

Here is another report from the well respected Citizen Lab about the use/misuse, sale/mis-sale of the spyware Pegasus by the Israeli NSO Group. GeckoSpy: Pegasus Spyware Used Against Thailand’s Pro-Democracy Movement – The Citizen Lab The sale of these types of cyber weapons on the open market, is enabling governments …