![\"United](\"https:\/\/www.newsbeep.com\/il\/wp-content\/uploads\/2025\/11\/1762990402_460_0x0.jpg\")
<\/p>\n<\/p>\n
CISA issues Samsung smartphone security update warning.<\/p>\n
SOPA Images\/LightRocket via Getty Images<\/p>\n
Following the recent confirmation that hackers exploited a critical zero-day vulnerability in Samsung\u2019s Android image processing library to install Landfall smartphone spyware<\/a> during attacks, America’s Cyber Defense Agency, and the U.S. national coordinator for critical infrastructure security and resilience, CISA, has urged all organisations to update as soon as possible. Some federal agencies have a mandatory obligation to update within 21 days.<\/p>\n ForbesGoogle Issues Critical New VPN Threat Warning For Billions Of UsersBy Davey Winder<\/a>Ensure Your Samsung Is Updated Against CVE-2025-21042<\/p>\n As I reported on November 8, attackers have been confirmed as being successful in using a zero-day vulnerability<\/a> within the Samsung Android image processing library, CVE-2025-21042<\/a>, to install spyware on smartphones.<\/p>\n Security researchers from the Palo Alto Networks Unit 42 team published an in-depth analysis<\/a> of the attacks, detailing how CVE-2025-21042 was exploited in the wild before being patched by Samsung in April. This was no ordinary malware, either; this was commercial-grade spyware of the highest order. It is understood that the attacks started as early as July 2024, and were in operation for months until finally being patched by Samsung. <\/p>\n Unit 42 said that CVE-2025-21042 was not the first and is unlikely to be the last vulnerability that can be exploited by LandFall or similar spyware exploits. I have approached Samsung for a statement.<\/p>\n ForbesHotels Hacker Alert Issued As \u2018I Paid Twice\u2019 Attacks ConfirmedBy Davey Winder<\/a>Update Your Samsung Devices Now, By Order Of CISA<\/p>\n If you have already applied that update, sit back and relax \u2014 you are fully covered against any risk from this Landfall attack. However, if you are among those organizations who have not, for whatever reason, then CISA wants to have an urgent word: update now. OK, two words, but you get the idea.<\/p>\n CISA has added CVE-2025-21042 flaw to the Known Exploited Vulnerabilities catalog, which means it is now officially flagged as actively exploited, and Federal Civilian Executive Branch agencies are legally mandated to secure their Samsung devices within 21 days or stop using them.<\/p>\n \u201cAlthough BOD 22-01 only applies to FCEB agencies,\u201d CISA said<\/a>, \u201cCISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice.\u201d So, Samsung users, you know what to do and when to do it. What are you waiting for?<\/p>\n