GOOGLE FIXES TWO PIXEL ZERO-DAY FLAWS

Summary from the TLDR InfoSec newsletter

Google has released an update for Pixel phones that fixes vulnerabilities discovered being actively exploited by forensics firms. The first vulnerability is in the fast boot firmware and allows memory to be dumped from locked phones. Google’s fix involves zeroing the memory when booting fast boot mode. The second vulnerability allows local attackers to circumvent factory resets initiated by apps.