Vulnerabilities in Google and Apple products discovered

Russian cybersecurity firm Positive Technologies has reported 11 critical vulnerabilities affecting both Apple and Android devices. Of these, nine are related to Apple products and two to Android devices, including Pixel phones. The vulnerabilities were communicated through the Russian news agency TASS and highlight the fragility of security in systems that many users consider safe.

Why it matters

The discovery of these vulnerabilities is alarming, especially considering that Positive Technologies is under U.S. sanctions, raising questions about the legitimacy and application of their findings. These flaws could allow hostile applications to gain elevated system privileges on macOS or alter network settings on Android without user consent, potentially compromising personal data privacy and security.

What we know

The first Android flaw allows an attacker to use a crafted NFC tag to install and run an app without the device owner's approval. Meanwhile, the second flaw permits already installed apps to change Wi-Fi settings without requesting additional permissions, making it easier for network attacks and identity spoofing.

What remains unclear

It is still unclear whether Google and Apple have developed patches for these vulnerabilities or how they plan to address this situation. Furthermore, the response from the companies regarding the disclosure of these findings remains uncertain, which could impact user trust in their products.