Threat Source newsletter (Oct. 31, 2019)
Summary: Cisco Talos' Oct. 31, 2019 Threat Source newsletter warns that stalkerware spyware apps are growing more popular among everyone from nation-states to suspicious spouses tracking a partner's location, living in a gray area where they are not explicitly illegal but can be used for illegal purposes. The same issue covers a VMware Fusion 11 denial-of-service vulnerability triggered by a malformed pixel shader inside a guest OS that crashes the Fusion process on the host, and a BSides Lisbon talk by Vitor Ventura showing how the Telegram registration process was abused to intercept messages on non-rooted Android devices without replacing the official app.
Key Takeaway: The Telegram demonstration shows that end-to-end encryption does not stop a side-channel attack that intercepts messages on a non-rooted Android device without replacing the official app, so secure messaging alone is not a complete control.
Read the original at Cisco Talos ↗
- Topics
- Privacy
- Related
- Italy Fines Meta €805 Million Over Facebook's Android Gallery Access Without Explicit Consent Cyber Risks · Nov 15, 2026Better email classification, courtesy of you Cyber Risks ·