5 recent hacks that show smartphones are more vulnerable than we thought

A slightly different SMS attack, also uncovered earlier in September, targeted Android-based devices with messages aiming to trick users into changing their settings to give hackers access to their information.

Phones manufactured by Huawei, Samsung, LG, and Sony were vulnerable to the attacks, which were uncovered by cybersecurity research firm Checkpoint Research.

Hackers sent users messages posing as a network operator and instructing them to download Client Provisioning software. If users accept the download, their device will reroute its data through the hackers' server, granting them access to emails, contact lists, and browser activity.

Samsung and LG have already patched the vulnerability, while Huawei planned to roll out a patch later this month. Sony does not believe its devices are vulnerable, according to Checkpoint Research.

If you're unsure whether your device has the software update with the patch, be sure to refuse to download any software from an unrecognized number, and contact your provider directly if you receive suspicious messages.

Earlier this summer, cybersecurity watchdogs realized Android phones were vulnerable to being hacked by simply watching a video with embedded malware.

Researcher Marcin Kozlowski identified the vulnerability and posted a proof-of-concept showing how Android users could be exposed to a hack if they downloaded and played a video file with malicious code.

Google released a patch for the vulnerability in July, but millions of users were still waiting for the patch to be rolled out by their device manufacturers in the weeks that followed.

If you haven't downloaded a video file on your Android device, you're likely in the clear (videos played through third-party apps like WhatsApp or Facebook Messenger aren't vulnerable to the malware). Otherwise, ensure your Android software is fully up to date to ensure you're protected in the future.

In a massive breach that called into question the supposed impenetrability of Apple's iOS, a Google cybersecurity team revealed in August that a handful of websites hacked iPhones over a period of years.

The exact number of users affected remains unknown, and the malware runs in the background of the devices without any way of detecting it. Google did not name the specific websites that could infect users' phones.

However, once it was notified of the attack, Apple included a security patch in its iOS 12.1.4 update. If you're unsure whether your iPhone was affected, your safest option is to ensure you're running on iOS 12.1.4 or later.

Hackers installed surveillance malware on the smartphones of users who answered their calls via WhatsApp, the Financial Times reported in May.

The scope of the attack is unknown and the malware is largely undetectable. If you answered any suspicious calls on the app earlier this year, you may be affected — but in some cases, the malicious calls disappeared from call logs, and malware could have been transmitted even if users didn't pick up the phone.

Any brand of smartphone with WhatsApp installed was vulnerable to the attack, according to Facebook, WhatsApp's owner.

Facebook pushed out a security patch in a WhatsApp software update in May, so if WhatsApp is up to date, so users should be protected now.