NowSecure, research firm on security, published reports on vulnerabilities in smartphones from Samsung. Korean technology company responded by announcing that although the probability of attack is low, plans to release security updates for its mobile devices.
 |
| Samsung phones can be hacked by SwiftKey. |
The flaw discovered by Ryan Welton, mobile security researcher NowSecure left more than 600 million Samsung products vulnerable to hackers. The problem is the keyboard SwiftKey present in all Samsung phones. The software receives updates in plain text, that is, hackers could manipulate SwiftKey pretending you are doing an update when, in fact, an attack might be occurring.
In a new report, Samsung says that the chances of exploitation are low because the attack on SwiftKey require very specific conditions. Both the user and the attacker must be physically on the same network, without protection, while an update is being downloaded.
Besides all Samsung flagship models from the Galaxy S4, they are protected KNOX security platform that offers protection in real-time kernel and requires that SwiftKey attacks are very sophisticated devices that achieve impact.
NowSecure reported the failure of Samsung in December 2014 and the company developed a patch for the problem earlier this year. It was responsible for wireless operators implement the solution. NowSecure alleges that Verizon, AT & T and Sprint have not yet done.
However, through KNOX, Samsung can update security policies mobile air and eliminate potential vulnerabilities caused by SwiftKey topic. The company promises that security updates will be released in the coming days.
Samsung customers who wish to ensure that your device receives updates, must go to Settings> Screen Lock and Security> Other Security Settings> Security Policy Updates and make sure the "Automatic Updates" option is enabled.
Samsung recognizes that not all devices are equipped with KNOX, and is working on a firmware update. Availability and schedule may vary depending on the smartphone model, the service provider and the region.
Hope to enjoy this article.
0 comments:
Post a Comment