Mobile & Wireless
Apple has released iOS 16.7.1 and iPadOS 16.7.1 to patch CVE-2023-42824, a kernel vulnerability that has been exploited in attacks.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Midnight Mimosa is the name given to a malware campaign primarily running preinstalled on low-cost Android devices.
Mobile & Wireless
The patches resolve a critical vulnerability in Android’s System component that could lead to privilege escalation.
Mobile & Wireless
Apple released iOS and macOS updates to patch a zero-day vulnerability (CVE-2026-86950) reported by Meta’s product security team.
Mobile & Wireless
Google announced patches for the exploited privilege escalation vulnerability (CVE-2026-58704) on September 15.
Cybercrime
A global cybercriminal operation called BadBox has infected the firmware of more than 70,000 Android smartphones, CTV boxes, and tablets with the Triada malware.
Malware & Threats
Apple’s cat-and-mouse struggles with zero-day exploits on its flagship iOS platform is showing no signs of slowing down.
Mobile & Wireless
International mobile network operator Lyca Mobile says a cyberattack has significantly disrupted its services in many countries.
Mobile & Wireless
Qualcomm has patched more than two dozen vulnerabilities, including three zero-days that may have been exploited by spyware vendors.
Mobile & Wireless
The October 2023 security update for Android patches two vulnerabilities exploited in attacks, both likely linked to spyware vendors.
Data Protection
A group of academic researchers devised a technique to extract sounds from still images captured using smartphone cameras with rolling shutter and movable lens...
Mobile & Wireless
Russian zero-day acquisition firm Operation Zero is now offering $20 million for full Android and iOS exploit chains.
Malware & Threats
The Xenomorph Android banking trojan can now mimic financial institutions in the US and Canada and is also targeting crypto wallets.
Mobile & Wireless
Predator spyware delivered to iPhones and Android devices using iOS and Chrome zero-day vulnerabilities and MitM attacks.
Mobile & Wireless
Apple has patched 3 zero-day vulnerabilities that have likely been exploited by a spyware vendor to hack iPhones.
Malware & Threats
New versions of Pakistan-linked APT Transparent Tribe’s CapraRAT Android trojan mimic the appearance of YouTube.
Malware & Threats
CISA says Owl Labs video conferencing device vulnerabilities that require the attacker to be in close range exploited in attacks
Mobile & Wireless
China said it was following media reports about suspected security issues with iPhones but insisted there was no ban on its officials using the devices
Malware & Threats
Apple pushes out an urgent point-update to its flagship iOS and macOS platforms to fix a pair of security defects being exploited in the...
Mobile & Wireless
Android’s September 2023 security update resolves a high-severity elevation of privilege vulnerability exploited in malicious attacks.
Mobile & Wireless
Apple is inviting security researchers to apply for the 2024 iPhone Security Research Device Program (SRDP) to receive hackable iPhones.
Cyberwarfare
Five Eyes report details 'Infamous Chisel' malware used by Russian state-sponsored hackers to target the Ukrainian military’s Android devices.
Malware & Threats
The newly identified MMRat Android trojan has been targeting users in Southeast Asia to remotely control devices and perform bank fraud.
Mobile & Wireless
Ford says a critical vulnerability in the TI Wi-Fi driver of the SYNC 3 infotainment system on certain vehicle models does not pose a...
Learn about Frontier Pace Governance: a practical approach to helping IT operations move at AI speed without sacrificing security, accountability, or operational discipline.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)