Widespread use of unpatched open source code in the most popular Android apps distributed by Google Play has caused significant security vulnerabilities, suggests an American Consumer Institute report. Thirty-two percent -- or 105 apps out of 330 of the most popular apps in 16 categories sampled -- averaged 19 vulnerabilities per app, according to the report. Researchers found critical vulnerabilities in many common applications.

Samsung unveiled its much-anticipated Galaxy Note9 Thursday at its Unpacked event in New York City. The company made several other announcements as well, as it presented its vision for a seamlessly connected world. "We are creating a galaxy of experiences that span not just devices and locations but platforms and brands," said DJ Koh, CEO of Samsung Electronics, at the event.

AI plays a big role in Android 9, the latest version of Google's mobile OS. Called "Android Pie," it is designed to learn from its users' behavior, and apply those lessons to simplify and customize their phone experiences. Android 9 adapts to your life and the ways you like to use your phone," noted Sameer Samat, Google's vice president of product management for Android and Google Play.

Okta has announced the Okta API Products One App, which lets engineering teams and developers implement multifactor authentication for any single website or application. Developers can use API Products for One App free if they display "Identity by Okta" on the login page of their app. Among Okta API Products for One App's features are authentication and directory services for Web or mobile apps.

Google has revealed some major new features in the next version of its Android operating system for mobile devices. Now in public beta, the OS known as "Android P" includes features designed to address growing concerns about phone addiction and distraction. For example, a dashboard will show users how often, when and for how long they use each application on their phone.

About 20 percent of the most popular Android Apps available through the Google Play Store contain open source components with known security vulnerabilities that can be exploited by hackers, according to a report Insignary will release next week. The findings are the result of the company's recent comprehensive binary code scan of the 700 most popular Android Apps on the Google Play Store.

Apple lawyers have sent a copyright violation notice to Github, following the publication of leaked iOS 9 source code on the site. Though iOS 9 is dated, it's possible that the leaked code could be used to jailbreak older devices or worse. Publication of the code violated Apple's rights under the DMCA, the attorneys wrote, demanding that the iBoot source code be removed.

Most WiFi router vendors have not patched numerous firmware vulnerabilities discovered more than two years ago, according to a new report. OEM firmware built into WiFi routers use open source components that contain numerous known security vulnerabilities that can be exploited by hackers. Insignary conducted comprehensive binary code scans for known security vulnerabilities in WiFi routers.

Amazon on Tuesday introduced new functionality that enables its Alexa virtual assistant to send and receive SMS messages on devices running Android 5.0 or higher. Carrier charges may apply. Alexa, the software that powers the Echo line of smart speakers, can play and send personalized messages from contacts for users who have set up voice profiles.

A renowned Linux innovator has developed a new mobile operating system, called "Project eelo," in an effort to provide a level of data privacy that traditional Android and iOS devices fail to offer. The new eelo system will allow mobile phone users to regain control over their personal information at a price they can afford, said Gael Duval, who created Mandrake Linux back in 1998.

Open Garden has announced the launch of a new P2P service that allows users to share Internet connections and unused plan data for free, with compensation in a new cryptocurrency as an extra incentive. The company is offering the service through an app that can be downloaded from Google Play. The system requires no hardware other than an Android phone to participate in the Internet access sharing.

Billions of voice-activated IoT devices may be subject to external attack due to BlueBorne vulnerabilities, Armis revealed. Hackers could exploit BlueBorne to mount an airborne attack, using Bluetooth to spread malware and access critical data, including sensitive personal information. More than 20 million Amazon Echo and Google Home smart speakers could have been impacted by the flaws.

Appthority has warned that up to 700 apps in the enterprise mobile environment, including more than 170 that were live in official app stores, could be at risk to due to the Eavesdropper vulnerability. Affected Android apps already may have been downloaded up to 180 million times, the firm said. The vulnerability has resulted in large-scale data exposure.

Microsoft has partnered to integrate threat detection products from Bitdefender, Lookout and Ziften into Windows Defender, extending security to macOS, iOS, Linux and Android devices. No additional infrastructure will be required, Microsoft said. Once the integration is set, new events from onboard macOS, iOS, Android and Linux devices will begin surfacing on the Windows Defender ATP console.

A three-pronged banking malware campaign has been infecting Android phones since the beginning of this year, according to Proofpoint. Attackers have been stealing credentials, planting the Marcher banking Trojan on phones, and nicking credit card information. So far, they have targeted customers of BankAustria, Raiffeisen Meine Bank and Sparkasse, but the campaign could spread beyond Vienna.

Samsung has announced a new app, Linux on Galaxy, designed to work with its DeX docking station to bring a full Linux desktop experience to Galaxy smartphone users. Samsung earlier this year introduced DeX, a docking station that connects to a monitor to give Galaxy smartphone users a desktop experience. With the Linux on Galaxy app, users will be able to run full Linux desktop distributions.

As Google's new Pixel 2 smartphones get ready to hit the shelves, reviews of the models have begun mushrooming online. While the new phones generally have received positive grades, many reviewers found the their design boring. "The Pixel 2 hardware is ho-hum," observed Patrick Moorhead, principal analyst at Moor Insights and Strategy. "Google didn't take many risks in its design."

A security flaw in WPA2, the security protocol for most modern WiFi systems, could allow an attacker to steal sensitive data including emails, credit card numbers and passwords, Researchers at Belgian university KU Leuven reported Monday. Depending on the network configuration, the flaw also could allow an attacker to inject or manipulate information in the system.

Apple's use of facial recognition to unlock its iPhone X may open the gates for developers champing at the bit to bring the technology to the Android world. Face ID, which will replace fingerprint scanning in Apple's new iPhone X, uses Apple's TrueDepth 3D camera to verify the owner of a phone. Android developers have been working on similar systems, said Sensible Vision CEO George Brostoff.

Hologram on Thursday launched Nova, the first open source modem for cellular connectivity. Nova is a USB cellular modem purpose-built for Internet of Things development. Its Hologram software tools are compatible with most single board computers, such as Raspberry Pi. The Nova modem is open source and unlocked, so its use is not limited to Hologram's SIMs.

Regular readers know that I usually stick to the well-charted territory of essential terminal commands and practical overviews of Linux history, since they are immediately useful to newcomers. Thankfully for beginners, the basics don't change very quickly -- but that's not to say that Linux is a stagnant ecosystem. Far from it. Linux can be found at the very frontier of emerging computer trends.

Malware targeting Linux systems is growing, largely due to a proliferation of devices created to connect to the Internet of Things. That is one of the findings in a report WatchGuard Technologies released last week. The report, which analyzes data gathered from more than 26,000 appliances worldwide, found three Linux malware programs in the top 10 for the first quarter of the year.

Essential, a company founded by Andy Rubin, the "father of Android," on Tuesday pulled off the wraps on a new high-end smartphone. The Essential Phone, priced at $699, includes radios for connecting to all major U.S. carriers. The unit has an almost edge-to-edge display -- there's a bit of bezel at the bottom of its screen -- that wraps around the 8-MP selfie camera at the front.

Google showcased the next phase of its automotive strategy at its I/O conference earlier this week, and announced partnerships with Volvo and Audi, which unveiled concept vehicles running its new automotive system. Embedded Android for Automotive is an entirely new OS rather than an update to Android Auto. It will allow drivers to utilize Google services without an Android mobile device.

Google has been developing a new open source OS called "Fuchsia" for smartphones, tablets and other devices, which could be unveiled as early as this summer. Little has been revealed about the new OS since it first came to light last year. However, new details that surfaced last week have been making the rounds. Fuchsia apparently will move Google away from its long association with Linux.

Canonical will end its support for Ubuntu Touch phones and Ubuntu-powered tablets in June, and that it will shut down its app store at the end of this year. The company previously had signaled the system's demise, but it had not fixed a date. With Ubuntu Touch, a unified mobile OS based on Ubuntu Linux, Canonical hoped to establish a marketable alternative to Android and iOS.

The ability to run Android apps natively in a Linux desktop environment is a step closer to realization, thanks to Anbox, a new open source project. Simon Fels, lead software engineer at Canonical, last week debuted a pre-alpha release of the Anbox platform, which he has been working on independently since 2015. There were quite a few problems to solve on the way to a working version, he said.

Kingsoft had announced an expansion to its WPS Office suite to include WPS Cloud. The upgrade enables users to work in a cross-platform office suite environment with added storage, file roaming and sharing capabilities. The cloud-enhanced version is available for PCs and mobile as a fully functional free release and with premium subscriptions. It runs on Linux, Windows, Mac and Android devices.

Canonical's long and winding quest for a unified user experience came to a sudden halt on Wednesday, as founder Mark Shuttleworth announced the firm's decision to stop investing in its struggling Unity8 shell and revert to Gnome. The 6-year-old Unity plan was to create a user interface that could work on various types of devices, ranging from a mobile phone to a personal computer or tablet.

Google on Tuesday unveiled a developer preview of the latest version of its mobile operating system, code named "Android O." The new OS is designed to improve on battery life and interactive performance of devices, according to Dave Burke, vice president of engineering, Android, at Google. The new release puts automatic limits on what applications do in the background in three areas.