AppAgent: Open-Source Android AI Agent Framework
An open-source framework for AI agents on Android. Vulnerable to command injection and screenshot tampering attacks as demonstrated in recent research.
Tag: Android
AppAgentX: Open-Source Android AI Agent Framework
An open-source Android AI agent framework found vulnerable to multiple attack vectors including invisible text injection and host command execution.
Mobile-Agent-v3: Open-Source Android AI Agent Framework
An open-source mobile AI agent framework vulnerable to screenshot tampering, command injection, and credential theft via overlay attacks.
Open-AutoGLM: Open-Source Android AI Agent Framework
An open-source Android AI agent framework with over 25,000 GitHub stars. Vulnerable to multiple attacks including broadcast interception and command injection.
MobA: Open-Source Android AI Agent Framework
An open-source Android AI agent framework that streams screenshots over exec-out, avoiding file race conditions, but still vulnerable to other attack vectors.
UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices with Malware
Russian state-sponsored threat actors from the UAC-0145 sub-cluster, linked to Sandworm and GRU, are using fake CAPTCHA checks on compromised websites to…
COWARDDUCK: Android Backdoor Disguised as Security Tool
COWARDDUCK is a full-featured Android backdoor distributed via messaging apps, disguised as security tools. It exfiltrates contacts, files, and geolocation using Dropbox…
EU Orders Google to Open Android Mic, Camera and Screen to Rival AI Assistants
The European Commission has issued binding specification decisions under the Digital Markets Act, ordering Google to grant rival AI assistants the same…
European Commission Issues Binding Decisions Under Digital Markets Act
The European Commission has adopted binding specification decisions under the Digital Markets Act, requiring Google to open Android features to rival AI…
Android 17 Targeted by IonStack Exploit Chain
The IonStack exploit chain uses CVE-2026-10702 and CVE-2026-43499 to achieve remote code execution and root on Android 17 devices.