🔒Android 17 may finally add the native App Lock feature Pixel users have been waiting for

Android 17 could let your preferred home screen launcher lock apps behind a passcode or biometrics.

More details on this new feature can be found👇

🔗https://www.androidauthority.com/android-17-app-lock-rumor-3623814/

Here are four additional features in Google's big Android 16 QPR2 update that you may have missed!

#1 and #2 I covered in separate articles, but #3-4 I haven't mentioned before!

1) Circle to Search now works in Desktop Mode. I covered this separately, but you can now use Circle to Search on external displays in QPR2, not just your phone's internal one.

2) Redesigned sideloading UI. The UI that you see when sideloading an app has been updated with some Material 3 design elements.

3) Sharing images with links. When you share a screenshot of an app that supports Android's recents URL sharing feature, you'll have the option to attach a link to the post, too.

We spotted this in the 2508 Canary release but it's now available in QPR2! (H/T GreenShades9 on X)

4) External display preferences: When you connect your phone to an external display, Android now asks whether you want to simply mirror your phone’s screen or extend it (i.e. start Desktop Mode).

Android 16 QPR2 has a LOT of other new features and changes in it. Check out my full breakdown over on Android Authority👇

🔗https://www.androidauthority.com/android-16-qpr2-features-3621204/

FuzzMe - MobileHackingLab CTF Challenge WriteUp
https://hackmd.io/@sal/fuzzme-mobilehackinglab-ctf-writeup

⚠️ Fortinet, Ivanti & SAP just fixed critical bugs that let attackers break in or run code remotely.

➜ Fortinet: auth bypass via fake SAML login.
➜ Ivanti: admin takeover through poisoned dashboards.
➜ SAP: code injection in Solution Manager (CVSS 9.9).

🔗Patch Now: https://thehackernews.com/2025/12/fortinet-ivanti-and-sap-issue-urgent.html

⚠️ Microsoft just fixed 56 Windows bugs — one’s already being exploited.

It hides in the Cloud Files driver used by OneDrive, Google Drive, and iCloud — even if those apps aren’t installed. Hackers can chain it with phishing to gain SYSTEM access.

Plus: 2 zero-days in PowerShell and GitHub Copilot for JetBrains.

🔗 Details ↓ https://thehackernews.com/2025/12/microsoft-issues-security-fixes-for-56.html

⚡WEBINAR ⤑ Hackers are finding new ways into the cloud and most tools can’t spot them.

Next week, the #PaloAltoNetworks team will show real examples of how attacks happen and how to block them.

🔗 Join the live session to learn how to protect your setup: https://thehackernews.com/2025/12/webinar-how-attackers-exploit-cloud.html

⚠️ WinRAR just made CISA’s “actively exploited” list.

Russian, South Asian, and Ukrainian-targeting hacker groups are using the flaw to hijack Windows — by planting code that runs every time Word opens.

🔗 Patch WinRAR now ↓ https://thehackernews.com/2025/12/warning-winrar-vulnerability-cve-2025.html

⚠️ Three new PCIe security flaws found — they let hackers change or fake data moving between computer parts.

They affect some Intel Xeon and AMD EPYC chips.

The problem? It’s in the encryption that was supposed to keep data safe.

🔗 Read → https://thehackernews.com/2025/12/three-pcie-encryption-weaknesses-expose.html