GoKawiil
Tech News
Samsung has begun rolling out a new update for the Galaxy S24, S24 Plus, S24 Ultra, and S24 FE globally, carrying the September 2026 security patch that fixes 90 vulnerabilities. The update is roughly 450MB for the standard S24 models and 438MB for the S24 FE, but it does not include the stable One UI 9 build based on Android 17, which Samsung has not yet scheduled.
Meta has patched a serious security vulnerability found in its Muse AI assistant. The flaw could have let attackers seize control of Muse and exploit its permissions to access a user's connected apps and devices.
Google has released stable versions of its AndroidX Security State and Security State Provider libraries, giving apps a way to check the security status of individual Android components rather than relying solely on the device's overall security patch date. Apps can now determine which specific fixes are installed, which updates are pending, and whether known vulnerabilities have been addressed, even if the broad patch level hasn't changed.
PaperCut disclosed active exploitation of PaperCut NG/MF servers on August 27 with no CVE, no available exploit sample, and no patch. An emergency fix issued the next day was bypassed within hours, and a third patch only arrived on September 1, leaving customers exposed for roughly six days while attackers were already using the flaw in live attacks. A security researcher uses the episode to argue that the industry's old assumptions about response timelines no longer hold.