Zero-click Android SMS flaw can crash phones and drop calls
The disclosure describes denial of service, not code execution, and queued messages can crash the phone again after reboot.
64
Product
Android
- Mentions · 7d16
- Mentions · 30d63
- All mentions129
- First seenAug 17, 2026
- Last mentioned18h ago
Timeline
129 articles · newest firstThreatsDay: Fortinet fixes, PHP2Shell scans, Authenticator token flaw
Fortinet is withholding flaw details until November 10 while Hudson Rock reports 40,573 exposed FortiGate secrets.
64
Unreleased Claude built exploit chains for Chrome, Safari, and major OSes
Anthropic says the model made five exploits, including Android data theft and Linux root code execution; vendors have patched.
74
Malformed WAP Push text can crash Android phone service
Repeated messages can corrupt the SMS database so the phone app crashes on every boot, and Google marked it Won’t Fix.
64
Study tracks data flows from 50 free-to-play Android puzzle games
More than 16 GB of traffic showed ad-blocking DNS cut flows, while opting out sometimes increased them; measurements are public.
48
MR ROBOT Android MaaS rents bank trojans aimed at Indian customers
CloudSEK says one affiliate’s data held 5,407 texts from 153 devices, with call forwarding on 58 percent.
64
Banking trojans infect 17,960 Android phones in India
Group-IB says seven families intercepted 7,611,443 SMS messages and stole cards, OTPs, and identity data.
74
Malformed WAP Push SMS crashes Android telephony, dropping calls
Google's Android VRP marked the zero-click bug non-security and will not fix it; no CVE was issued.
66
CyberDakait malware hits 17,960 Indian banking Android devices
Operators intercepted 7,611,443 SMS messages and paired credential theft with XMRig mining on idle phones.
72
Google to allow one-tap installs from approved Android stores outside the US
Approved stores get the feature on December 1 for Android 17 QPR2 or later after ongoing malware scans.
52
Anthropic says unreleased Claude built Chrome, Android and Linux exploits
Vendors were notified first; Chrome 156 fixed 62 CVEs, and the Linux root flaw is CVE-2026-98432.
82
Unreleased Claude model wrote Chrome, Linux and Android exploit chains
Anthropic says the lab-only chains were reported first and fixed, including Chrome 156, with no real-world incidents.
74
Anthropic's unreleased model chained flaws into patched OS exploits
Lab proofs, not live attacks, covered Chrome 156, iOS 26.5.2, Windows CVE-2026-33096, and Linux CVE-2026-98432.
74
Anthropic says Claude built critical exploit chains in Chrome, Safari and Android
Google assigned 62 critical or high Chrome CVEs, patched as of Chrome 156; Apple and Google say the Safari and Android issues are fixed.
76
Fake Android apps push ZloyRAT at Russians amid fuel and drone fears
F6 says three apps, including a police-and-fuel map, steal banking data; download counts and losses were not disclosed.
58
User says Claude Code found 214,856 deleted files in Pixel cache
The outlet says the X claim is unverified and does not prove recovery of original deleted photos or an Android flaw.
32
Show HN post says full iOS 16.5 firmware runs on Android
The feed only links the hackios-xnu-kernel repository and notes 53 points and 22 comments.
20
Hirudo Android trojan swaps real banking apps for hooked copies
ThreatFabric says replacements are ready for eight Indonesian bank apps and that August 2026 backend data held thousands of credential entries.
68
Hirudo Android RAT swaps banking apps using fake updates
ThreatFabric says lure apps drop Hirudo, which can uninstall genuine Indonesian bank apps and install modified copies that spoof integrity checks.
68
Midnight Mimosa malware ships in Android phone firmware
A platform-signed system app installs ad-fraud plugins after briefly disabling the Play Store; proxy use was not seen.
70
Google adds a phone number to every account signed in on Android
Verification is on by default for current and later accounts, and turning it off does not delete numbers already added.
28
Midnight Mimosa hides ad-fraud malware in cheap Android firmware
Bitdefender saw thousands of infected phones in more than 150 countries over about two years.
74
MicroG reimplements Google’s proprietary Android user space
The Hacker News post only links the project wiki and gives no release or security details.
5
Google adds Android AI protections against scam calls, phishing and OTP theft
Enhanced Protection in Google Messages will use Gemini on unknown-sender chats and Gemini Nano to score unfamiliar links.
46
New GhostBat Android Malware Targets 60 Banking and UPI Apps to Steal PINs
GhostBat Android malware steals UPI PINs from 60 Indian banking apps using accessibility overlays and transparent keypads.
64
Android Malware Exposes Its Own Operators While Hijacking Phones and Stealing Sensitive Data
Android RAT YuanKong leaks operator account IDs while abusing Accessibility and Wireless Debugging to control phones.
58
Infinity Core: Linux Kernel Core LPEs
Researchers disclosed six Linux kernel flaws enabling local privilege escalation, container escape, and Android compromise.
78
New YuanKong Android RAT Hijacks Phones to Steal Banking PINs and Passwords
Star Labs analyzed YuanKong, an Android RAT using Accessibility and overlays to steal banking PINs and passwords.
66
Google Android Flags 5 Million Suspected Scam Calls and Texts Monthly
Google says Android now flags over five million suspected scam calls and texts monthly and is adding Gemini protections.
46
Google Automatically Adds Your Phone Number to Every Google Account on Your Android Phone
Google’s default Android setting automatically attaches verified phone numbers to every signed-in Google account.
42
Android adds AI-powered scam alerts, hangs up on bank impostors
Google is adding Gemini-powered Android scam alerts, link checks, and automatic hang-ups on unverified bank calls.
55
Hackers Target 60 Indian Banking and UPI Apps With New GhostBat Android Malware
GhostBat Android malware targets 60 Indian banking and UPI apps, capturing PINs via Accessibility overlays.
72
Android gets AI defenses against messaging scams, fake calls
Google is rolling out Gemini-backed Android defenses against scam texts, spoofed bank calls, and silent call forwarding.
52
Remote Attestation Should Not Be Tolerated
A blog argues Google Play Integrity and similar remote attestation lock users out of devices they own.
24
Novel Android RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies
ThreatFabric details Hirudo, an Android banking RAT that swaps Indonesian bank apps for trojanized copies.
64
The GhostX Ecosystem: Forged in Transit, Licensed to Deceive
GhostBat RAT, part of the GhostX ecosystem, steals banking PINs from Android users in India via smishing and overlays.
74
Google Play Hosted Fake Chrome App With 100,000+ Downloads
Google Play hosted a Hizbartech fake Chrome app, later removed, that showed 100,000-plus downloads.
60
Hirudo Android Trojan Replaces Banking Apps to Steal Credentials
Hirudo uninstalls real Android banking apps and installs patched copies to steal credentials and bypass security checks.
74
Google is silently linking your phone number across all signed-in accounts
Google now auto-verifies and attaches an Android phone number to every signed-in Google account unless users opt out.
38
Android is using AI to suss out scammers in Google Messages
Google is adding opt-in Gemini scam detection in Android Messages and expanding protections to more phone makers.
60
Related CVEs
by mentions- CVE-2026-58704<1%8.8Permission Bypass in Google Pixel Cellular Modem Allows Proximal Privilege Escalation
- CVE-2026-98432<1%9.8Use-after-free in Linux kernel IPv4 TCP options
- CVE-2026-28662<1%8.0Heap Buffer Overflow in Android Wi-Fi Direct (P2P) Provisioning Discovery Enables Nearby RCE
- CVE-2026-330961%7.5Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to deny service over a network
- CVE-2025-68788<1%—Linux kernel: fsnotify: do not generate ACCESS/MODIFY events on child for special files inotify/fanotify do not allow users…
- CVE-2025-485952%8.4Integer Overflow Local Privilege Escalation in Android Framework
- CVE-2026-49882<1%8.8Heap Buffer Overflow in Android NFC MIFARE Classic Reader Enables RCE
- CVE-2026-58820<1%7.8Android OS Integer Overflow Enables Local Privilege Escalation
- CVE-2026-28590<1%7.8Improper Encryption Key Validation Enables Local Privilege Escalation in Android
- Out-of-Bounds Write in Google Pixel Modem Link Driver Enables Local Privilege Escalation
Appears with
- Googlevendor · 87
- Googleorganization · 18
- Google Playproduct · 14
- Windowsproduct · 13
- Microsoftvendor · 13
- Applevendor · 13
- Chromeproduct · 11
- Geminiai model · 10
- MediaTekvendor · 10
- RatHatmalware · 10
- Midnight Mimosamalware · 10
- Bitdefenderorganization · 10
- Pixelproduct · 9
- Group-IBorganization · 9
- Zimperiumorganization · 8
- ThreatFabricorganization · 8
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.