Cyble analyzed deVixor, an advanced Android banking RAT with ransomware features actively targeting Iranian users.

Over the past few years, several AI-powered features have been added to mobile phones that allow users to better search and understand their messages. One ef...

With the advent of a potential Dolby Unified Decoder RCE exploit, it seemed prudent to see what kind of Linux kernel drivers might be accessible from the res...

While our previous two blog posts provided technical recommendations for increasing the effort required by attackers to develop 0-click exploit chains, our e...

WhisperPair is a family of practical attacks leveraging a flaw in the Google Fast Pair implementation on flagship audio accessories.

WPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair) vulnerability in Google's Fast Pair protocol. This vulnerability affects millions of Blueto...

Robust Frida-based tool to dump decrypted iOS apps as .ipa from a jailbroken device supports App Store, sideloaded and system. - lautarovculic/frida-ipa-extract

Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows - trailofbits/skills

Experts at the Doctor Web antivirus laboratory have discovered and investigated a new trojan clicker malware family. All of these trojans either are administered via the <span class="string">hxxps[:]//dllpgd[.]click</span> server or get downloaded and launched…

I’ve spent the last couple of days trying to turn my S23 Ultra into the ultimate mobile hacking machine.