This Multi-State Information Sharing and Analysis Center (MS-ISAC) Advisory is being provided to assist individuals, agencies, and organizations in guarding against the persistent malicious actions of cybercriminals. Multiple vulnerabilities have been discovered in Android OS.
Throughout 2023, researchers discovered 10 new trojans targeting Android devices and 19 banking malware families that had persisted since 2022. These malware families targeted banking apps across 61 countries, primarily targeting traditional banking apps.
A vulnerability has been discovered in Google Chrome, which could allow for arbitrary code execution. Successful exploitation of this vulnerability could allow for arbitrary code execution for the logged on user. Attackers could install programs; view, change, or delete data; or create new accounts.
A vulnerability has been discovered in Google Chrome, which could allow for arbitrary code execution. Successful exploitation of this vulnerability could allow for attackers to install programs; view, change, or delete data; or create new accounts with administrative user rights.
Search Generative Experience (SGE) is Google’s upcoming generative artificial intelligence (AI) search feature. Google first allowed users to opt into the Google SGE results in May 2023. Google began rolling out this feature to a small sample of random users who have not yet opted in.
A good cybersecurity practice is to stay informed of publicly disclosed vulnerabilities and to update all device hardware, operating systems, apps, software, and anti-virus or anti-malware programs. These patches address flaws and security within a program that could be exploited.
Google issued a new security update for Chrome users on multiple platforms to patch an exploit titled CVE-2023-6345. CVE (common vulnerabilities and exposures) is a method used to publicly share information regarding cybersecurity vulnerabilities and exposures.
A vulnerability in Google Chrome could allow hackers to execute arbitrary code on affected systems, potentially taking control of computers and accessing sensitive data. The article outlines the risks and essential mitigation measures to protect against this threat.
