Computer Weekly reveals for the first time how French cyber spies hacked EncroChat phones used by organised crime groups.

Summary UNISOC (Shanghai) Technologies Co., Ltd. is a top-three global fabless semiconductor company headquartered in Shanghai, specializing in 2G/3G/4G/5G mobile communication, IoT, and smart device chipsets. Formerly Spreadtrum, it serves major brands like…

Porting the public ghostlock exploit (CVE-2026-43499) to the Samsung Galaxy A17 (SM-A175F, GKI 6.12.23): KDP at EL2, DEFEX safeplace, PANIC_ON_OOPS, and 187 GB KASLR slides, ending in a clean no-panic root and a persistent root shell.

true

I recently tested NFC Canary against several real-world tools used by security researchers and penetration testers, and it raises an interesting question

A researcher’s account of dismantling a fake traffic-challan APK that hides an SMS-intercepting, UPI-hijacking trojan — and stumbling onto…

Manic is a newly identified Android malware family with broad surveillance and remote-control capabilities, introducing an unusual Wi‑Fi mesh technique.

BARGHEST found a cache poisoning attack in BitChat and replay flaw in BLE mesh synchronization that enabled durable network disruption before patching.

MCP (Model Context Protocol) server as a jadx-gui plugin. Lets an AI client (Claude Code, Claude Desktop, or any MCP client) analyze the app currently loaded in jadx-gui. - 0xdad0/jadx-mcp

The ClockworkPi uConsole is already an interesting portable Linux computer. By connecting a Proxmark3, it can also become portable RFID research for exploring and understanding contactless cards and tags, cloning them and identifying how different cards work…

This repository proposes a novel methodology for automated privacy compliance analysis of mobile applications based on multi-prompt Large Language Model (LLM) cooperation. The framework applies to ...

Scammers are posing as employers on Indeed to trick job seekers into installing fake Android interview apps that deliver malware.

Hello friends, in this blog we’re going to talk about a challenge I took while learning Android Security. I took this challenge while following a really great Android security course on Hextree. The course is sponsored by Google, and the material is excellent…

ThreatFabric researchers have uncovered StreamRat, a new Android banking trojan promoted to Spanish-speaking users through Meta and TikTok advertisements.

Most people assume that once their phone is locked, their photos are protected from anyone who picks up the device. However, a behavior discovered Jose Rodriguez shows that photos may be accessible during an incoming WhatsApp video call, even while the phone…

Contactless cards and key fobs are now part of everyday life. They unlock apartment buildings, identify employees, open hotel rooms, record attendance and interact with electronic locks. Although many of these credentials look similar from the outside, the…

Black Box Dynamic Analysis Telegram Mini App Tool to detect Privacy Policy Violations - Mobile-IoT-Security-Lab/TeleGapper

The first zero-click worm to spread through WeChat calls across iOS and Android.