Google Pixel phones sold with security vulnerability, report finds

A recent report by cybersecurity firm iVerify revealed that most Google Pixel phones sold since September 2017 contained a hidden software vulnerability that could allow for surveillance or remote control of the devices. This issue was identified when iVerify's endpoint detection system flagged an insecure Android device at Palantir Technologies, prompting a joint investigation. The investigation uncovered a hidden Android package named Showcase.apk, which was initially developed by Smith Micro Software for Verizon's in-store demonstrations. Although the app was inactive by default, it could be manually enabled, exposing the operating system to potential hacking, man-in-the-middle attacks, and spyware. Palantir's chief information security officer expressed concerns over the presence of unvetted software on devices intended for secure operations, leading the company to ban Android devices internally. Google acknowledged the issue, stating that the software was no longer in use and that there was no evidence of active exploitation. They confirmed that a fix would be rolled out to remove the app from affected devices in the coming weeks.

- Most Google Pixel phones since 2017 have a hidden software vulnerability.

- The vulnerability allows for potential surveillance and remote control of devices.

- The software, Showcase.apk, was developed for Verizon and was inactive by default.

- Palantir Technologies banned Android devices internally due to security concerns.

- Google is set to release a fix to remove the vulnerable software from affected devices.