{
  "id": 10788090,
  "title": "Sanctioned billion-dollar cybersecurity company from Russia finds 11 vulnerabilities in Google and Apple products — including a nasty one that compromised a device just through a malicious NFC tag",
  "url": "https://urgent.news/2026/09/29/sanctioned-billion-dollar-cybersecurity-company-from-russia-finds-11",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-29T21:15:00.000Z",
  "source": {
    "name": "TechRadar",
    "slug": "techradar",
    "url": "https://www.techradar.com/pro/sanctioned-billion-dollar-cybersecurity-company-from-russia-found-11-vulnerabilities-in-google-and-apple-products-including-a-nasty-one-that-compromised-a-device-just-through-a-malicious-nfc-tag"
  },
  "original_language": "en",
  "account": "Russian cybersecurity firm Positive Technologies alleges it has uncovered 11 security flaws affecting Android and Apple devices, including one particularly dangerous issue discovered through NFC tags. The company, currently facing American sanctions, shared its findings with Russian news agency TASS. Nine vulnerabilities impacted Apple products and software, while two affected Android devices like Pixel phones, both rated as high severity.\n\nThe first Android flaw allowed attackers to use a crafted NFC tag to install and execute an app without the owner's approval. The second flaw enabled an app on the phone to alter network settings, including connecting to a chosen Wi-Fi network, without additional permissions. The NFC tag flaw is deemed especially hazardous due to the phone's proximity to the tag being enough to trigger the vulnerability. Google patched both Android issues in its September 2026 updates, so devices with those patches should no longer be at risk. However, the specific Android versions or Pixel models vulnerable remain unknown, so users should ensure they have the latest security updates.\n\nRegarding Apple devices, Positive Technologies reported nine flaws that increased the potential for attackers to gain higher system privileges, expose sensitive information, and weaken data protections. One macOS flaw granted hostile apps complete control over the computer, while another exposed protected system information. Additionally, a kernel-level flaw could cause a device to fail or corrupt memory data. Apple has released fixes for these vulnerabilities, but older devices without updates remain exposed. Android users should verify their software version to ensure they have installed the September 2026 patches. While neither Google nor Apple commented on Positive Technologies' report, both promptly provided patches, suggesting the claims are credible.",
  "summary": "Nine Apple vulnerabilities affected access controls, privacy, macOS, and data protection, while two Android flaws enabled dangerous system changes.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 5,
    "also_reported_by": [
      {
        "outlet": "9to5Google",
        "title": "Google says Chromebook updates end in 2034, ‘many’ models move to Googlebook OS",
        "url": "https://urgent.news/2026/09/28/google-says-chromebook-updates-end-in-2034-many-models-move-to",
        "published": "2026-09-28T15:15:00.000Z"
      },
      {
        "outlet": "Tom's Hardware",
        "title": "Google confirms ChromeOS phase out in 2034 — 10-year support lifetime cut short for some devices, company says it will support transition to Googlebook OS",
        "url": "https://urgent.news/2026/09/28/google-confirms-chromeos-phase-out-in-2034-10-year-support-lifetime",
        "published": "2026-09-28T16:38:07.000Z"
      },
      {
        "outlet": "Ars Technica",
        "title": "Google seemingly confirms plans to kill ChromeOS in 2034",
        "url": "https://urgent.news/2026/09/28/google-seemingly-confirms-plans-to-kill-chromeos-in-2034",
        "published": "2026-09-28T18:04:59.000Z"
      },
      {
        "outlet": "Slashdot",
        "title": "Google Says Chromebook Updates End In 2034, 'Many' Models Move to Googlebook OS",
        "url": "https://urgent.news/2026/09/29/google-says-chromebook-updates-end-in-2034-many-models-move-to",
        "published": "2026-09-29T17:00:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}