iOS 18.6.1 0-click RCE POC (CVE-2025-43300)
https://github.com/b1n4r1b01/n-days/blob/main/CVE-2025-43300.md

Mobile & Phone Related OSINT Sites
https://uk-osint.net/mobilephone.html

CISA just flagged 3 new actively exploited flaws—two in Citrix Session Recording, one in Git.

The Git bug (CVE-2025-48384) can let attackers run arbitrary code just by cloning a repo. Proof-of-concept exploit is already out.

Here’s what you need to know ↓ https://thehackernews.com/2025/08/cisa-adds-three-exploited.html

🛑 Important: Google is locking down Android.

Starting Sept 2026, every app — even outside the Play Store — must come from a verified developer.

No more anonymous sideloads. No quick comebacks for malware gangs.

First up: Brazil, Indonesia, Singapore, Thailand.

Full story ↓ https://thehackernews.com/2025/08/google-to-verify-all-android-developers.html

📢 Google & Workday both confirmed breaches this summer — attackers slipped in through social engineering, not software flaws.

The group behind it, ShinyHunters, used phone scams + fake apps to access Salesforce data.

Here’s what actually happened ↓ https://thehackernews.com/expert-insights/2025/08/shinyhunters-data-breach-vs-saas-why.html

🚨 A new Android banking trojan just leveled up: HOOK now locks victims’ screens with ransomware-style extortion demands.

Worse? It can also steal your banking logins, crypto wallets, PIN codes—and even stream your screen.

Here’s how it works ↓ https://thehackernews.com/2025/08/hook-android-trojan-adds-ransomware.html

🚨 Over 100 hacked WordPress sites are being used in a new campaign called ShadowCaptcha — luring visitors with fake CAPTCHA checks that drop info-stealers, ransomware, and crypto miners.

The trick? Copy-pasted commands from your clipboard turn into attacks.

Here’s what you need to know ↓ https://thehackernews.com/2025/08/shadowcaptcha-exploits-wordpress-sites.html

Install this app, this app list modules of magisk, ksu, apatch, you can add customized repo's too. Too many option. https://github.com/MMRLApp/MMRL

HDR support comes to Wayland sessions for Chromium.

https://news.itsfoss.com/chromium-native-hdr-support-wayland/

Looking for games without the chaos? Here are the best picks! 🕹🐧

https://itsfoss.com/non-violent-games-llinux/

ArmSoM is on a roll. The AIM7 is now at its final stage of crowdfunding:

https://news.itsfoss.com/armsom-aim7-debuts/

ELEGANTBOUNCER: Catch iOS 0-click exploits without having the samples.
Features iOS backup forensics & messaging app scanning for iMessage, WhatsApp, Signal, Telegram & Viber attachments.
https://www.msuiche.com/posts/elegantbouncer-when-you-cant-get-the-samples-but-still-need-to-catch-the-threat/

Geometry Dash on the Amazon Echo Spot, unironically, the touch is way more responsive than on many other devices I own

Veritasium made an interesting deep-dive on how lithium ion batteries in your smartphones work.

Sony was the first brand to coin 'lithium-ion' and make it commercially available for everyone.

https://youtu.be/AGglJehON5g?si=94xAOqrKC1Pasl-b

A disgruntled employee inserted a "kill switch" into his employers network. In the event he was laid off, his malicious code would trigger.

The code included the function "IsDLEnabledInAD"

His name was Davis Lu

Truly an epic gamer moment. He got sentenced to 4 years in prison