Flaw in Verizon Pixel’s firmware poses serious security threat (Update: Google statement)

Update, August 15, 2024 (02:06 PM ET): Google has reached out to share its response to reports of the Showcase vulnerability, emphasizing the conditions that would need to exist for a successful attack, and discussing the steps it plans to take going forward. A spokesperson explains:

This is not an Android platform nor Pixel vulnerability, this is an apk developed by Smith Micro for Verizon in-store demo devices and is no longer being used. Exploitation of this app on a user phone requires both physical access to the device and the user’s password. We have seen no evidence of any active exploitation. Out of an abundance of precaution, we will be removing this from all supported in-market Pixel devices with an upcoming Pixel software update. The app is not present on Pixel 9 series devices. We are also notifying other Android OEMs.

Original article, August 15, 2024 (09:00 AM ET): Mobile security firm iVerify recently discovered a significant vulnerability that could potentially impact millions of Pixel devices globally. The said vulnerability was spotted within an Android application package on Pixel devices and can leave them susceptible to man-in-the-middle attacks, spyware installations, and more.