Crafted WAP Push SMS can crash Android calls, including emergency
A five-byte WAP Push kills com.android.phone; Google patched Android 14–17 in October 2026, while 12 and 13 may stay exposed.
Stories per day · 30 days
2 RSS
Relatedandroid5denial-of-service5wap-push5zero-click4ai-agents1cogui1emergency-calls1emergency-services1google1haozi1imessage1instinct1microsoft1personal-assistant1phishing1phishing-kits1storm-31191telephony1
10 stories, newest first · one card per story
Stories tagged #sms
.jpg&w=828&q=75)
Android SMS of Death PoC can crash unpatched phones (CVE-2026-58882)
A public proof of concept sends a malformed WAP Push that crashes com.android.phone and can drop emergency calls.
Zero-click Android SMS flaw can crash phones and drop calls
The disclosure describes denial of service, not code execution, and queued messages can crash the phone again after reboot.
Malformed WAP Push text can crash Android phone service
Repeated messages can corrupt the SMS database so the phone app crashes on every boot, and Google marked it Won’t Fix.
Malformed WAP Push SMS crashes Android telephony, dropping calls
Google's Android VRP marked the zero-click bug non-security and will not fix it; no CVE was issued.
Messaging agents from Instinct and rivals work over text
Instinct is valued at $10 billion after a $1 billion round; several rivals run over SMS, iMessage, or RCS.
Yam Store: The Phishing Network Behind a Billion Messages
Microsoft says Yam Store, tracked as Storm-3119, fueled over one billion phishing emails and texts.
Microsoft Entra ID to Block SMS First-Factor Sign-Ins Worldwide in February 2027
Microsoft will block SMS first-factor sign-in for Entra ID workforce tenants worldwide on February 1, 2027.
Microsoft reminds admins to migrate Entra ID users to passkeys
Microsoft reminds admins to migrate Entra ID users to passkeys before SMS first-factor sign-in is retired in February 2027.
3
Scammers have figured out the best time to text you
Malwarebytes threat data shows scammers tailor platforms per scam, with the web as top channel, Friday midday peaks, and MrBeast the most impersonated person.
2