Android Jelly Bean, Kit Kat vulnerable to security flaw

[mgsstar]

A new flaw was recently found in the Google Android Jelly Bean and Kit Kat OS flavors, with the "critical flaw" compromising the virtual private network (VPN) in the Android OS.

 

Compromised devices allow cybercriminals to monitor communication after VPN traffic is sent to a different network address.

 

The flaw, which was found in India, can be successfully remedied by installing updates from OEM manufacturers, the CERT-In team says. Installing anti-virus and anti-malware protection on the device should help add additional layers to prevent Android exploits from causing problems.

 

"A critical flaw has been reported in Android's (virtual private network) VPN implementation, affecting Android version 4.3 and 4.4 which could allow an attacker to bypass active VPN configuration to redirect secure VPN communications to a third party server or disclose or hijack unencrypted communications," said the Computer Emergency Response Team of India (CERT-In).

 

 

Source:http://www.tweaktown.com/news/35912/android-jelly-bean-kit-kat-vulnerable-to-security-flaw/index.html

 

This is pretty dangerous that they can change a VPN that someone is using to a malicious one. Hope Google and phone manufacturers will release fixes ASAP. Never used VPNs on Android because got annoyed because of the PIN that it required when using a VPN.

 

[SirRoderick]

Good thing I don't expect a secure connection on a mobile device then

[Unknown_Guy]

Hope Google and phone manufacturers will release fixes ASAP.

Manufacturers and Android updates - isn't it  something that doesn't fit in one sentence...

[mgsstar]

Manufacturers and Android updates - isn't it  something that doesn't fit in one sentence...

I guess so lol. Should have meant Google releasing an update so phone manufacturers will implement it.

[NInety]

Now I want candy....