Samsung developing security update to patch keyboard vulnerability

Phone

We reported yesterday how a vulnerability in the default keyboard software of millions of Samsung mobile devices could leave users at risk of being targeted by attackers, the vulnerability was discovered and disclosed by Ryan Welton from NowSecure during the Blackhat Security Summit in London. The vulnerability stemmed from the SwiftKey keyboard pre-installed on countless Samsung smartphones which sends searches for keyboard language packs unencrypted and in plain text, leaving the door open for attackers to create spoof proxy servers to inject malicious code remotely.

NowSecure found the vulnerability to be present in devices such as the Galaxy Note 4, Note 3, Galaxy S3, S4, S5 as well as the Galaxy S6 and S6 edge. Samsung has now officially commented on the issue, saying that it takes emerging security threats “very seriously,” and that it's aware of this particular issue. It's going to roll out the security update in a couple of days to address this once and for all.

Samsung takes emerging security threats very seriously. We are aware of the recent issue reported by several media outlets and are committed to providing the latest in mobile security. Samsung Knox has the capability to update the security policy of the phones, over-the-air, to invalidate any potential vulnerabilities caused by this issue. The security policy updates will begin rolling out in a few days. In addition to the security policy update, we are also working with SwiftKey to address potential risks going forward.

Advertisement

Via

Adnan Farooqui - Executive Editor

[email protected]

First Samsung device: SGH-E900

Adnan Farooqui is a long-term writer at SamMobile. Based in Pakistan, his interests include technology, finance, Swiss watches and Formula 1. His tendency to write long posts betrays his inclination to being a man of few words.

Phone Samsung

Samsung developing security update to patch keyboard vulnerability

Adnan Farooqui - Executive Editor

[email protected]

First Samsung device: SGH-E900

You might also like

With iOS 26, Apple is close to matching Samsung's software update policy

Samsung Galaxy AI vs. Apple Intelligence [Part 7]: Note organization

Samsung Galaxy AI vs. Apple Intelligence [Part 5]: Language translation

Samsung Galaxy AI vs Apple Intelligence [Part 4]: Voice transcription