Meta has announced new WhatsApp account security features, including support for multiple passkeys per account on both iOS and Android, enhancing phishing-resistant…
Security researchers at SSD Secure Disclosure have published a two-stage exploit chain that achieves full Android kernel access on devices running Unisoc…
Fuyao apps are malicious applications pre-installed on Android TV boxes that spoof device identities to mimic popular phone brands, perform ad fraud,…
Google ML Kit is used by the Fuyao operation for optical character recognition to read screen content and assist in ad fraud…
Nebula Security researchers have demonstrated that a single visit to a malicious webpage can compromise the Tor Browser by exploiting a patched…
IonStack is a browser-to-kernel exploit chain developed by Nebula Security, using CVE-2026-10702 for browser compromise and CVE-2026-43499 for root escalation on Android.
SpyNote is a remote access trojan (RAT) that has been observed in the wild alongside WindRelay in NFC relay attacks. It is…
Kimwolf is an Android and IoT botnet active since mid-2024, targeting Android TV boxes and Linux IoT devices. It conducts DDoS attacks…
A test automation tool for Android that accepts text via broadcast intents. Its documented functionality is exploited by AI agents for input,…
Researchers have demonstrated that open-source Android AI agent frameworks are vulnerable to a novel attack chain where invisible screen text can lead…