Endpoint/Device Security

Google released patches for 40 security vulnerabilities affecting Android devices. Vulnerabilities include remote code execution, elevated privilege, and remote denial of service (DoS) flaws.

The U.S. First Circuit Court of Appeals has overturned a district court's dismissal of a class-action lawsuit accusing publishing company Gannett of violating the Video Privacy Protection Act (VPPA) by sharing mobile app data with a third-party firm.

A judge in Brazil ordered mobile phone operators to shutter the WhatsApp chat service for three days.

The market, not government regulation, will push IoT security to a higher standard, says John Ellis of Ellis & Associates.

Fitbit has acknowledged on its website that an April 2016 update to its Aria Wi-Fi Smart Scale, an Internet-connected bathroom scale, patched a critical security vulnerability that was discovered through Google's Project Zero initiative.

The FBI recently pressed for a 29-year-old Los Angeles woman to provide her fingerprint to open her phone after she was sentenced in an identity theft case.

Mobile attacks can workaround two-factor authentication on Android phones and inject malware onto iOS phones.

Attack vectors multiply as more devices connect to enterprise environments, says IANS's Chris Poulin.