Google fixes two Android zero-day bugs actively exploited by hackers

On Monday, Google released an update for Android that fixes two zero-day flaws that “may be under limited, targeted exploitation,” as the company put it. That means Google is aware that hackers have been and may still be using the bugs to compromise Android devices in real world scenarios. One of the two now-fixed zero-days, tracked as CVE-2024-53197, was identified by Amnesty International in collaboration with Benoît Sevens of Google’s Threat Analysis Group, the tech giant’s security team that tracks government-backed cyberattacks.. In February, Amnesty said it had found that Cellebrite, a company that sells devices to law enforcement for unlocking and forensically analyzing phones, was taking advantage of a chain of three zero-day vulnerabilities to hack into Android phones. Contact Us Do you have more information about Android zero-days? From a non-work device, you can contact Lorenzo Franceschi-Bicchierai securely on Signal at +1 917 257 1382, or via Telegram and Keybase @loren ... Read full article.