Research Finds 11 High-Impact Security Flaws on Galaxy S6 Edge

Research Finds 11 High-Impact Security Flaws on Galaxy S6 Edge

A team at Google tasked with discovering and exploiting severe bugs and exploits in Android recently turned their attention to the Samsung Galaxy S6 Edge smartphone. The team found “11 high-impact security issues” with the phone.

In just a week of research, the team attempted to find security flaws that could allow them access to contacts, photos, geolocation and other personal data, as well as the ability to remotely wipe the device. In total, they found 11 separate vulnerabilities. In particular, issues with Samsung’s own email client and gallery app created new security risks, in addition to security risks that were already inherent in the underlying Android operating system.

In other words, Android OEM software is adding security risks as well as unnecessary clutter and update delays to Android phones.

Fortunately, the biggest of the 11 flaws were able to be fixed within 90 days of their discovery and the three remaining pose lesser risks and will also be fixed in November. While the team has resolved the issues on the Galaxy S6 Edge, there’s no way they can achieve the same kind of research for the many thousands of other Android devices on the market.

For now, Google has committed to pushing out monthly Android security patches and if it finds the necessary cooperation from mobile carriers, it could make some progress on having a more security strategy.

About the Author

Sydny Shepard is the Executive Editor of Campus Security & Life Safety.

Featured

New Products

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area.

  • Automatic Systems V07

    Automatic Systems V07

    Automatic Systems, an industry-leading manufacturer of pedestrian and vehicle secure entrance control access systems, is pleased to announce the release of its groundbreaking V07 software. The V07 software update is designed specifically to address cybersecurity concerns and will ensure the integrity and confidentiality of Automatic Systems applications. With the new V07 software, updates will be delivered by means of an encrypted file.

  • Compact IP Video Intercom

    Viking’s X-205 Series of intercoms provide HD IP video and two-way voice communication - all wrapped up in an attractive compact chassis.