Samsung admits to security wormhole in some Galaxy devices
Briefly

Samsung has alerted users that its Galaxy devices may inadvertently store copied passwords in plaintext, raising security concerns. A community forum user highlighted this issue, questioning the clipboard's handling of sensitive data. Samsung acknowledged this concern but advised users to manually clear clipboard history and use secure input methods. In a separate incident, Cybernews reported a vulnerability linked to WorkComposer, revealing an unsecured AWS S3 bucket containing over 21 million screenshots from employee monitoring software, spotlighting ongoing issues with data security and access.
"I copy passwords from my password manager all the time," OicitrapDraz wrote on April 14. "How is it that Samsung's clipboard saves everything in plain text with no expiration? That's a huge security issue."
We understand your concerns regarding clipboard behavior and how it may affect sensitive content. Clipboard history in One UI is managed at the system level."
Samsung's post is an admission that users of those devices need to be extremely careful when copying sensitive info to the clipboard.
Cybernews found millions of those screenshots in what it described as "an unsecured Amazon S3 bucket." The outlet didn't explain the bucket's security deficiencies, but it is safe to assume it was set to allow public access.
Read at Theregister
[
|
]