Mobile & Wireless
An investigation has been launched into a Wi-Fi service hack that has impacted many train stations in the United Kingdom.
Hi, what are you looking for?
SecurityWeek
Mobile & Wireless
The patches resolve a critical vulnerability in Android’s System component that could lead to privilege escalation.
Mobile & Wireless
Apple released iOS and macOS updates to patch a zero-day vulnerability (CVE-2026-86950) reported by Meta’s product security team.
Mobile & Wireless
Google announced patches for the exploited privilege escalation vulnerability (CVE-2026-58704) on September 15.
Fraud & Identity Theft
Deceptive apps in Early Access are being used by dishonest developers for their own benefit.
Mobile & Wireless
The iServer phishing-as-a-service platform was used by Spanish-speaking criminals to harvest credentials and unlock stolen and lost phones.
Mobile & Wireless
Google has released Android security updates to patch an exploited local privilege escalation vulnerability.
Mobile & Wireless
New phishing attacks target iOS and Android users with Progressive Web Applications and WebAPKs to steal banking information.
Mobile & Wireless
Samsung has paid out nearly $5 million through its bug bounty program since 2017 and the tech giant announced that the top reward has...
Mobile & Wireless
Hackers targeted MDM firm Mobile Guardian and remotely wiped thousands of devices, but there is no evidence of data compromise.
Malware & Threats
The BlankBot Android trojan exfiltrates user data, executes C&C commands, and supports custom injections, keylogging, and screen recording.
Malware & Threats
The BingoMod Android trojan steals user information and communication and allows attackers to steal money via account takeover.
Malware & Threats
Five Android applications containing the Mandrake spyware have been downloaded over 32,000 times from Google Play since 2022.
Mobile & Wireless
Verizon subsidiary TracFone Wireless settles for $16 million with the FCC over three old data breaches.
Mobile & Wireless
Starting in September, Microsoft will mandate the the use of Apple’s iPhones to authenticate identities when logging into work machines.
Mobile & Wireless
Google ships an Android security update with fixes for 15 vulnerabilities, including a critical-severity flaw in Framework.
Malware & Threats
The zero-day is tagged as CVE-2024-32896 and described as an elevation of privilege issue in Pixel Firmware.
Mobile & Wireless
To comply with new UK government regulations, Apple has specified that iPhones will get at least 5 years of security updates.
Mobile & Wireless
Android’s June 2024 security update resolves 37 vulnerabilities, including high-severity flaws in Framework and System.
Mobile & Wireless
Google is boosting fraud and malware protections in Android 15 with live threat detection and expanded restricted settings.
Mobile & Wireless
Android’s May 2024 security update patches 38 vulnerabilities, including a critical bug in the System component.
Mobile & Wireless
Microsoft has uncovered a new type of attack called Dirty Stream that impacted Android apps with billions of installations.
Malware & Threats
Researchers can earn as much as $450,000 for a single vulnerability report as Google boosts its mobile vulnerability rewards program.
Malware & Threats
The new Wpeeper Android trojan ceased operations after a week and has zero detections in VirusTotal.
Learn how to address potential risks and not restrict AI adoption in your organization. See what a centralized AI gateway is and how it works in practice.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)