Researchers have discovered ten vulnerabilities in Google’s Quick Share file-transferring utility for Android, Windows, and Chrome. Some were combined into a remote code execution attack against Quick Share for Windows. The flaws, which were exploitable when transferring files between devices, enabled unauthorized file writing, forced wifi connections, and denial of service attacks. Google has since fixed all the vulnerabilities and issued two Common Vulnerabilities and Exposures (CVE) identifiers.
The NCSC wants developers to get serious on software security
The NCSC’s new Software Security Code of Practice has been praised by cyber professionals as a significant advancement in enhancing software supply chain security.
