A VPN settings breach bug was recently discovered in Android software versions 4.3 Jelly Bean and the latest version of Google's mobile operating system, KitKat 4.4, Israeli researchers claim.
Researchers at Ben Gurion University discovered the initial bug and then conducted further testing to determine its existence in KitKat. The researchers published their latest findings on the university's Cyber Security Labs blog.
Google did not respond to a request for comment, but security experts say the bugs in both versions of Android should be patched quickly. “I think this is a serious issue,” said Paul Henry, a senior security instructor at the SANS Institute. Because of the differences in the operating system versions, the same malicious code cannot be used, the researchers said. However, this can be achieved with the malware, it is the same.
