Just before the new story arrives about Chrome exploit, we’re explaining on how Google planning to warn Gmail users from receiving unsecurely delivered Emails (unencrypted). Bad news fro the whole Android ecosystem is that from a security perspective. Presented by Guang Gong, a security researcher employed by Quihoo 360, the findings at this year’s PacSec conference in Tokyo that demonstrates a serious vulnerability in the Google’s mobile OS platform, Android. Vulnerability that can easily be exploited by those with the correct knowledge is accessible thanks to a gaping security oversight in native Chrome browser of Android. What’s more terrifying fact is that it applies to every single version of Android with the latest version of Chrome installed.
This Chrome vulnerability further adds to the scare posed, with which it can compromise a device no matter what Android version or Chrome browser its running.
PacSec organizer Dragos Ruju, who was present on the PWN2OWN panel that was privy to the presentation, has discussed the sophistication of the techniques used:
(Source: The Register)