Samsung patches zero-day security flaw used to hack into its customers’ phones

Samsung has announced the resolution of a critical zero-day vulnerability that posed a significant risk to its customers' smartphones. This security flaw, identified in an image display software library, enabled hackers to remotely inject malicious code into devices operating on Android versions 13 through 16. The issue came to light following a private alert from Meta and WhatsApp on August 13, where it was revealed that an exploit had been actively utilized in the wild. Unfortunately, Samsung has not disclosed which specific devices are impacted by this vulnerability. The term 'zero-day' refers to the fact that the company was unaware of the flaw before it was exploited, leaving them with no time to implement a fix. As of now, it remains unclear who orchestrated this hacking campaign or the total number of affected customers. Samsung did not provide a comment when reached prior to publication. This recent patch aligns with a broader trend of security updates across various mobile software platforms, as companies rush to address ongoing spyware threats. Notably, Apple and WhatsApp also issued critical updates in August, targeting vulnerabilities that were reportedly exploited against both iPhone and Android users. WhatsApp confirmed that they had informed fewer than 200 users whose devices had been compromised during this campaign. In a similar vein, Apple has remained relatively tight-lipped about its own security patches, only acknowledging that the flaws were exploited in a sophisticated attack directed at specific individuals. The tech giant continues to notify customers potentially affected by spyware attacks and recommends that they seek assistance from Access Now's digital security lab. Recently, on September 3, Apple informed a number of users about their phones being targeted as part of the ongoing spyware efforts, as reported by the French government.