Security news weekly round-up - 29th May 2020
Tags: security
Published: 2020-05-29 13:30:06

---
title: Security news weekly round-up - 29th May 2020
published: true
description: A curated link about computer security from around the web
tags: security
cover_image: https://dev-to-uploads.s3.amazonaws.com/i/pyy42pwiihy23jhw2v7f.jpg
series: Security news weekly round-up
---

> __Cover photo by [Jazmin Quaynor](https://unsplash.com/@jazminantoinette) on [Unsplash](https://unsplash.com/).__

##__Introduction__

Welcome to the weekly round-up of security news from around the Web. I _hope your week was fine_.

This week it's all about _hacking_, _zero-day bugs_, _malware_, and _android security_.

<hr>

###__[New Tool Can Jailbreak Any iPhone and iPad Using An Unpatched 0-Day Bug](https://thehackernews.com/2020/05/iphone-ios-jailbreak-tools.html)__

The title says it all.

Excerpt from the article:

> The hacking team behind the "unc0ver" _jail breaking_ tool has released a new version of the software that can unlock every single iPhone, including those running the latest iOS 13.5 version.

###__[New ComRAT Malware Uses Gmail to Receive Commands and Exfiltrate Data](https://thehackernews.com/2020/05/gmail-malware-hacker.html)__

Humans _tend_ to be smarter than their own creations.

Excerpt from the article:

> "ComRAT v4 was first seen in 2017 and known still to be in use as recently as January 2020," cybersecurity firm ESET said in a report shared with The Hacker News. "We identified at least three targets: two Ministries of Foreign Affairs in Eastern Europe and a national parliament in the Caucasus region."

###__[New Android Flaw Affecting Over 1 Billion Phones Let Attackers Hijack Apps](https://thehackernews.com/2020/05/stranhogg-android-vulnerability.html)__

At the time writing, Android is arguably the most used _mobile operating system_, therefore, this is serious business.

Excerpt from the article:

> A security vulnerability affecting Android that malicious apps can exploit to masquerade as any other app installed on a targeted device to display fake interfaces to the users, tricking them into giving away sensitive information.

###__[The Security of Your Android Device May Depend on Where You Live](https://www.securityweek.com/security-your-android-device-may-depend-where-you-live)__

I know you might be thinking: Is this for real? Well, you will have read the article to find out.

Excerpt from the article:

> Over the last few years, security researchers have been able to crack various Android phones during Pwn2Own hacking competitions. Now one firm has collected its research and finds a potentially significant global problem: Android security may be dependent on the country of use.

###__[Pablo Escobar’s brother sues Apple for $2.6b over FaceTime flaw](https://nakedsecurity.sophos.com/2020/05/28/pablo-escobars-brother-sues-apple-for-2-6b-over-facetime-flaw/)__

This is a mixture of alleged _software bug_ and _lawsuit_.

Excerpt from the article:

> According to the lawsuit, Escobar bought an iPhone X back in April 2018. One year after the purchase, Roberto claims he got a life-threatening letter from someone named Diego who claimed to have found Roberto’s address through FaceTime.

###__[Cisco hacked by exploiting vulnerable SaltStack servers](https://www.bleepingcomputer.com/news/security/cisco-hacked-by-exploiting-vulnerable-saltstack-servers/)__

If you've heard the term _networking_ before the name _Cisco_ should ring a bell.

Excerpt from the article:

> As detailed by the company, the hackers were able to compromise six backend infrastructure servers: us-1.virl.info, us-2.virl.info, us-3.virl.info, us-4.virl.info, vsm-us-1.virl.info, and vsm-us-2.virl.info.

###__[200K sites with buggy WordPress plugin exposed to wipe attacks](https://www.bleepingcomputer.com/news/security/200k-sites-with-buggy-wordpress-plugin-exposed-to-wipe-attacks/)__

The _plugin_ in question is _PageLayer_.

Excerpt from the article:

> Two high severity security vulnerabilities found in the PageLayer plugin can let attackers to potentially wipe the contents or take over WordPress sites using vulnerable plugin versions.

<hr>

That's it for this week, I'll see you next Friday.