Wyndham Android app password exposed customer data in Salesforce
A researcher found the password in the app source, unlocking names, emails, member numbers, login tokens, and files.
Stories per day · 30 days
14 RSS
Relatedgoogle19botnet12banking-trojan11denial-of-service9ios9videostrong9apt298gemini7privacy7watering-hole7accessibility6hirudo6zero-click6india5linux5mobile-malware5play-integrity5sms5
235 stories, newest first · one card per story
Stories tagged #android
Google expands Gemini Intelligence to more Android devices
Motorola’s signature 27 opens for US pre-order on November 19, while task automation reaches the UK, India, and Japan.
Firefox free VPN drops its 50GB monthly cap until January 31
Signed-in desktop and Android users in supported regions get unlimited in-browser VPN traffic through that date.
Study traces CVE-linked vulnerable code copied across projects
Using SQVDT on NVD data, the authors report copy-paste reuse of high-severity patterns inside and between projects.
Mirax Android malware steals bank funds via accessibility services
Group-IB says thousands of retail banking phones in the Middle East, Türkiye and Africa were infected from March to September 2026.
Kaspersky: mobile attacks fell in Q3 as banking Trojans led
Blocked attacks fell to 1,668,368, while 378,456 malicious packages included 119,688 mobile banking Trojans.
Researchers remotely commanded cars through two automakers’ Android apps
Chains used ForgeRock defaults and WAF path-traversal bypasses; both unnamed automakers patched within two hours of disclosure.
Threat bulletin covers library ransomware and exploited SonicWall, OpenSSH flaws
SonicOS SAML VPN bypass and OpenSSH before 10.6p2 are described as actively exploited; Android 14–17 RCE is also patched.
4
Dutch bank ASN blocks non-Google Android including GrapheneOS
The bank ASN has restricted non-Google Android devices such as GrapheneOS on its systems.
GhostMap Android flaw lets installed app force a boot loop
Bitdefender’s no-permission demo crashed a Pixel 10 on Android 17; Google closed the report without a patch.
APT29 uses watering hole attacks on mobile devices
Sekoia linked APT29 to a mid-October 2026 campaign targeting iOS and Android via hacked sites and compromised analytics service.
1
Kremlin-linked hackers exploit iOS and Android flaws to infect phones
Attackers injected JavaScript to profile devices and steal cookies, Wi-Fi passwords, and full device data from visitors to targeted sites including america250.org.
Android security advisory November 2026 monthly rollup
Android security bulletin addresses vulnerabilities affecting Android devices.
APT29 targets iOS and Android users with n-day exploits
APT29 uses compromised sites and lookalike domains to deliver n-day exploits stealing cookies and device data from iOS and Android users spotted in mid-October 2026.
2
APT29 hijacks web analytics script to deliver iOS and Android exploits
APT29 uses Plerdy SEO Tracker supply chain compromise to serve n-day exploits stealing cookies and device data from iOS and Android users in 2026.
7
APT29 watering holes target patched iPhones and Android
Attackers served exploit chains for already-patched iOS and Android flaws via legitimate websites and lookalikes.
1
APT29 uses fake US UK sites for iOS Android exploits
APT29 campaign hits iOS 16.7 18.5 and Android Chrome with patched n-day flaws via JavaScript injection and supply-chain compromise.
3
Google patches critical Android RCE flaws allowing remote code execution
November 2026 Android Security Bulletin addresses critical RCE vulnerabilities in Android 14-17 without user interaction.
APT29 Uses Watering Hole Attacks on Trusted Sites
APT29 planted malicious scripts on real and cloned websites in the US, Ukraine and Europe to compromise outdated iPhones and Androids by stealing cookies and data.
3
Critical Android Flaw CVE-2026-58868 Allows Remote Code Execution
Google fixed heap buffer overflow allowing remote code execution without interaction in Android 14-17.
Russian Hackers Use N-Day Exploits in Zero-Click Attacks on iOS and Android
APT29 deploys n-day exploits via watering-hole sites on iOS and Android devices with no user interaction.
Google Patches Critical Android Flaw Allowing Remote Code Execution
The flaw affects Android 14 through 17 and could allow attackers to run code remotely without user interaction.
Google dismantles X.CPE botnet in Android TV boxes
Google with partners takedown of X.CPE botnet affecting over 1.3 million Android TV set-top boxes linked to Videostrong Technology.
Google dismantles botnet on 1.3 million Android TV boxes
Google seizes Videostrong domains, cutting off 10 million devices; Play Protect remains disabled on infected MECOOL boxes.