Binance warns iOS sandbox escape can expose crypto wallet keys
Public PoC worse_query reads other apps' data on iOS 26 and 27; Apple's latest notes list no fix and no thefts are reported.
1
Stories per day · 30 days
98 RSS
Relatedandroid2apt292ios2watering-hole2appsec1binance1corellium1crypto-wallets1gemini1gemini-nano1google1google-messages1guardsquare1imei1imsi1masvs1miniapps1nowsecure1
28 stories, newest first · one card per story
Stories tagged #mobile-security
Paper compares WeChat and Telegram MiniApp security designs
The qualitative study derives cross-platform analysis requirements and does not claim validated vulnerability findings.
APT29 uses watering hole attacks on mobile devices
Sekoia linked APT29 to a mid-October 2026 campaign targeting iOS and Android via hacked sites and compromised analytics service.
1
12 Best Mobile Application Security Testing Tools Compared (2026): Features & Pricing
A 2026 roundup compares 12 mobile AppSec tools for testing, shielding, and device virtualization.
4
Android is using AI to suss out scammers in Google Messages
Google is adding opt-in Gemini scam detection in Android Messages and expanding protections to more phone makers.
A Systematic Study of Security Enforcement at Android Inter-Component Boundaries
Study finds 97 Android IPC enforcement gaps, including URI schemes handling sensitive data.
Android 17 Advanced Protection Adds Intrusion Logging, USB Security and Brute-Force Defense
Google adds intrusion logging, USB lockdown, and brute-force defense to Android 17 Advanced Protection.
Product showcase: Webroot Mobile Security screens texts, blocks risky sites, and checks for data leaks
Webroot Mobile Security screens SMS scams, blocks risky sites, and monitors breach exposure on iOS and Android.
2
Pixel 11 doesn't yet meet the GrapheneOS security standards and may be skipped
GrapheneOS may skip Pixel 11 because it does not yet meet the project's security standards.
Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools
Android 17 Advanced Protection will limit AccessibilityService access to verified Accessibility Tools, blocking a common malware path.
Android 17 makes it harder for spyware to cover its tracks
Android 17 Advanced Protection adds off-device forensic logs and tighter controls against spyware and physical access.
GitHub AI Security Agent Finds 24 Android Vulnerabilities Including Account Takeover Flaws
GitHub’s AI security agent found 24 Android flaws, including OsmAnd tracking and Wikipedia account takeover.
2
GitHub’s AI agent found 24 Android app vulnerabilities
GitHub Security Lab's AI taskflows found 24 Android app vulnerabilities, including location tracking in OsmAnd and session-cookie theft in Wikipedia's app.
Context-Aware Functional Modeling for Android Third-Party Library Detection
LibFan detects partial Android libraries under heavy obfuscation, beating prior detectors on a new benchmark.
Is that vibe coded app safe? 5 checks before you download
ESET lists five checks for vetting AI “vibe coded” apps that may leak data or enable fraud.
3
Lookout targets smishing, voice cloning, and vishing with real-time mobile protection
Lookout launched mobile protection that detects smishing, vishing, and AI voice clones in real time.
1
Android Apps Can Now Check If Your Phone Is Missing Critical Security Patches
Google releases Android Security State libraries letting apps and enterprise tools verify component-level security patch status across system, Mainline modules, and kernel.
Android apps can now check security patches down to individual device components
Google shipped stable AndroidX Security State libraries letting Android apps check per-component patch levels and CVE patch status via OSV data.
Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation
Google's September Pixel update patches CVE-2026-58704, a high-severity cellular modem privilege escalation flaw showing signs of limited targeted exploitation.
Apple Releases iOS 27 Security Update to Fix Over 120 Vulnerabilities
Apple released iOS 27 and iPadOS 27 patching roughly 126 vulnerabilities across kernel, WebKit, sandboxing, and authentication components; no active exploitation reported.
Samsung mobile security advisory (AV26-919)
Canadian Cyber Centre relays Samsung's September 2026 mobile security update (SMR-SEP-2026) fixing multiple vulnerabilities; users urged to apply patches.
Google’s Early Access is creating a blind spot for malicious apps
Bitdefender found thousands of Google Play Early Access apps with deceptive behavior, including ad-fraud-capable utilities requesting excessive permissions on Android devices.
Don't Trust the Super-App: A Case Study of Russia's Max
Researchers show super-apps like Russia's Max can silently capture mini-app UI, storage, network traffic, and authentication, enabling untraceable user impersonation.
The 12 Best Mobile Threat Defense (MTD) Solutions, Compared and Priced
A comparison of 12 mobile threat defense vendors highlights Zimperium's on-device detection and notes Kaspersky's US exit and Wandera's Jamf absorption.
6