Three critical-severity remote code execution vulnerabilities impact ASUS RT-AX55, RT-AX56U\_V2, and RT-AC86U routers, potentially allowing threat actors to hijack devices if security updates are not installed. \[...\]

ASUS routers vulnerable to critical remote code execution flaws

Gaming gear company Razer reacted to recent rumors of a massive data breach with a short statement on Twitter, letting users know that they started an investigation into the matter. \[...\]

Razer investigates data breach claims, resets user sessions

Apple addressed three new zero-day vulnerabilities exploited in attacks installing Triangulation spyware on iPhones via iMessage zero-click exploits. 

Apple fixes zero-days used to deploy Triangulation spyware via iMessage

Samsung has developed a new security system called Samsung Message Guard to help Galaxy smartphone users keep safe from the so-called "zero-click" exploits that use malicious image files. \[...\]

Samsung adds zero-click attack protection to Galaxy devices

On macOS systems that don't have Apple's recent security updates, a vulnerability identified as CVE-2022-26706 could help an attacker bypass sandbox restrictions to execute code with elevated privileges. \[...\]

Microsoft releases tweet-size exploit for macOS sandbox escape bug

Microsoft is investigating a new known issue causing Azure Active Directory and Microsoft 365 sign-in issues on Arm devices after deploying the June 2022 Windows updates. \[...\]

June Windows updates break Microsoft 365 sign-ins on Arm devices

Microsoft is investigating a newly acknowledged issue causing connectivity issues when using Wi-Fi hotspots after deploying Windows updates released during the June 2022 Patch Tuesday. \[...\]

Microsoft: June Windows updates may break Wi-Fi hotspots

Researchers at the University of Hamburg in Germany have conducted a field experiment capturing hundreds of thousands of passersby's WiFi connection probe requests to determine the type of data transmitted without the device owners realizing it. \[...\]

WiFi probing exposes smartphone users to tracking, info leaks

Microsoft has addressed a newly acknowledged known issue that caused flickering screen problems and made some Windows apps (e.g., File Explorer, Start Menu, and Taskbar) seem unstable in Safe Mode without Networking. \[...\]

Microsoft fixes Windows 11 bug causing flickers in safe mode

Security analysts have found that Android devices running on Qualcomm and MediaTek chipsets were vulnerable to remote code execution due to a flaw in the implementation of the Apple Lossless Audio Codec (ALAC). \[...\]

Critical bug in Android could allow access to users' media files

Microsoft announced today that the 30-year-old SMBv1 file-sharing protocol is now disabled by default on Windows systems running the latest Windows 11 Home Dev channel builds, the last editions of Windows or Windows Server that still came with SMBv1 enabled. \[...\]

Microsoft disables SMB1 by default for Windows 11 Home Insiders

Microsoft says Windows 10, version 21H2 (aka the November 2021 Update) is now designated for broad deployment, making it available to everyone via Windows Update. \[...\]

Windows 10 21H2 now in broad deployment, available to everyone

A banking trojan for Android that researchers call Fakecalls comes with a powerful capability that enables it to take over calls to a bank's customer support number and connect the victim directly with the cybercriminals operating the malware. \[...\]

Android banking malware takes over calls to customer support

Google has announced several key policy changes for Android application developers that will increase the security of users, Google Play, and the apps offered by the service. \[...\]

Google boosts Android security with new set of dev policy changes

Mobile malware analysts warn about a set of applications available on the Google Play Store, which collected sensitive user data from over 45 million devices. \[...\]

BleepingComputer