New Pixnapping Attack allows any Android app without permissions to leak info displayed by other apps exploiting Android APIs and a hardware side channel (CVE-2025-48561)
Pixnapping is not fixed and probably affects all Androids.
PoC: Not available yet.
Video demonstrates stealing 2FA codes from Google Authenticator. It's like taking screenshot. Pixnapping exploits a side channel that allows the malicious app to map the pixels at those coordinates to letters, numbers, or shapes.
Info: https://www.pixnapping.com/

APK Tool GUI: GUI for apktool, signapk, zipalign and baksmali utilities
https://github.com/AndnixSH/APKToolGUI

Chance

Imageboard browser built using Flutter intended for use on iOS and Android.

🔗 Links:
- Downtown
- Features
- Source code
Developer: Callum Moffat

❤️ Support the Project

If this project makes your life easier, here are a few quick ways to show some love:

⭐ Star the repo/app
☕ Buy a coffee for the developer
🛠 Contribute code, issues, or pull-requests

🏷 Tags: #Android #iOS #Media #Social

Yupp AI

Yupp.ai allows users to compare responses side by side by providing the same prompt to different AI models such as ChatGPT, Claude, and Gemini, rate their preferences based on criteria such as clarity, accuracy, or creativity, and provide feedback. This feedback is recorded in a blockchain-based secure environment, contributing to the continuous improvement of models through reinforcement learning. Users can earn "Yupp credits" in exchange for the quality feedback they provide, which can be used for new trials or converted into cash. This innovative platform offers both AI enthusiasts and developers a transparent, auditable, and rewarding AI evaluation experience.

🔗 Link:
- Website

🏷 Tags: #Website #AI

PIXEL INNOVATIVE STRIKES AGAIN!

🧑‍💻 @agamtechtricks

Firefox will render gradients properly now. Better late than never even if it takes 15 years.

https://fixvx.com/theo/status/1978161273214058786

What is Telegram doing? Doesn't it know the difference between a bot and a human?

https://news.itsfoss.com/telegram-unfair-community-ban/

GhostBat RAT: Inside the Resurgence of RTO-Themed Android Malware
https://cyble.com/blog/ghostbat-rat-inside-the-resurgence-of-rto-themed-android-malware/

⚠️ Heads-up! SAP just re-patched a critical CVSS 10.0 flaw (CVE-2025-42944) in NetWeaver AS Java — a deserialization bug that lets attackers execute commands without authentication.

Apply. The. Fix. → https://thehackernews.com/2025/10/new-sap-netweaver-bug-lets-attackers.html

🍪 A cookie that spawns a shell 💀

A critical flaw (CVE-2025-2611, CVSS 9.3) in ICTBroadcast autodialer software is under active exploitation.

Attackers inject commands via the BROADCAST session cookie for unauthenticated remote code execution.

No patch yet — check your stack → https://thehackernews.com/2025/10/hackers-target-ictbroadcast-servers-via.html

~200 servers are exposed.

🔥 Agentic AI isn’t just automating—it’s thinking and acting.

Zscaler’s CEO says it’s a bigger shift than cloud or IoT.

The upside? Faster support and instant threat response.
The risk? Rogue AIs scanning your network right now.

Learn why Zero Trust isn’t optional anymore → https://thehackernews.com/videos/2025/10/exploring-agentic-ai-innovation-meets.html

⚙️ If you run industrial gear — check your Red Lion RTUs.

Two CVEs (both 10/10) let anyone pop root via one open port. Water, energy, transport — all at risk.

Patch ASAP. Details here → https://thehackernews.com/2025/10/two-cvss-100-bugs-in-red-lion-rtus.html

🔴 Microsoft just dropped fixes for 183 security flaws.

3 are already being exploited — including one buried in every Windows PC since XP.

...and at the same time, it is ending Windows 10 support (unless you pay).

Details + patch info ↓ https://thehackernews.com/2025/10/two-new-windows-zero-days-exploited-in.html

📺Google TV is working on a one-touch camera feed shortcut for your remote

The customizable button on select Google TV remotes may soon be able to directly launch your camera feed.

More details in the link👇

🔗https://www.androidauthority.com/google-tv-camera-feed-shortcut-rumor-3607128/

That is classic Microsoft...

https://www.xda-developers.com/microsoft-breaks-windows-10-to-11-upgrade-tool/

⚡️Inside Big Tech’s Surveillance Machine: My Interview on The Way Forward

I just sat down with Alec from The Way Forward for a powerful conversation on privacy, autonomy, and the deeper effects of living under big tech’s surveillance.

We got into how our data is tracked and traded, what most people don’t realize about the systems behind it, and how we can start building a life beyond constant digital control.

If you care about freedom — both digital and spiritual — this one’s worth watching.

🎧 Watch or listen here.
📲 Learn about Above Suite

—
🫶 @takebackourtech
📩 WEBSITE & NEWSLETTER | 🎥 VIDEOS| XMPP | SUBSTACK

🔥 New free playbook from Pillar Security : a hands-on framework for red-teaming agentic AI systems.

Covers the AI Kill Chain, context engineering, and the CFS model for crafting and testing realistic attack simulations.

🔗 No sign-up required: https://thn.news/agentic-defend

🚨 Over 100 VS Code extensions leaked access tokens — letting attackers push malicious updates to 150,000+ installs.

A single exposed key could’ve weaponized the software supply chain.

Full story ↓ https://thehackernews.com/2025/10/over-100-vs-code-extensions-exposed.html