Malware & Threats
The new Wpeeper Android trojan ceased operations after a week and has zero detections in VirusTotal.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Midnight Mimosa is the name given to a malware campaign primarily running preinstalled on low-cost Android devices.
Mobile & Wireless
The patches resolve a critical vulnerability in Android’s System component that could lead to privilege escalation.
Mobile & Wireless
Apple released iOS and macOS updates to patch a zero-day vulnerability (CVE-2026-86950) reported by Meta’s product security team.
Mobile & Wireless
Google announced patches for the exploited privilege escalation vulnerability (CVE-2026-58704) on September 15.
Mobile & Wireless
The Federal Communications Commission leveraged nearly $200 million in fines against wireless carriers AT&T, Sprint, T-Mobile and Verizon for illegally sharing customers’ location data.
Malware & Threats
In 2023, Google said it blocked 2.28 million bad applications from being published on Google Play and banned 333,000 developer accounts.
Malware & Threats
A new Android trojan named Brokewell can steal user’s sensitive information and allows attackers to take over devices.
Mobile & Wireless
Google this week patched two Pixel phone zero-day vulnerabilities actively exploited by forensic companies to obtain data from devices.
Mobile & Wireless
Google patches 28 vulnerabilities in Android and 25 bugs in Pixel devices, including two flaws exploited in the wild.
Malware & Threats
NCC Group researchers warn that the Android banking malware ‘Vultur’ has been updated with device interaction and file tampering capabilities.
Mobile & Wireless
Apple is opening small cracks in the iPhone’s digital fortress as part of a regulatory clampdown in Europe— at the risk of creating new...
Mobile & Wireless
Android’s March 2024 security update resolves 38 vulnerabilities, including two critical flaws in the System component.
Mobile & Wireless
Apple rolls out urgent patches to fix multiple security flaws in its flagship iOS platform and warned about zero-day exploits in the wild.
Malware & Threats
The Treasury Department sanctioned individuals associated with Intellexa Consortium, maker of the powerful Predator Spyware.
Mobile & Wireless
AT&T said the hourslong outage to its U.S. cellphone network Thursday appeared to be the result of a technical error, not a malicious attack.
Mobile & Wireless
Researchers document VoltSchemer attacks that manipulate power voltage to take over commercial wireless chargers.
Malware & Threats
Security teams need to combine the angles of client-side and server-side detection in order to have the best chance of mitigating the risk of...
Malware & Threats
Recent Anatsa Android banking trojan attacks have become more targeted, showing an evolution in tactics.
Mobile & Wireless
The existence of a previously unknown infection technique used by spyware firm NSO Group is suggested by a single line in a contract between...
Mobile & Wireless
A couple of Wi-Fi authentication bypass vulnerabilities found in open source software can expose enterprise and home networks to attacks.
Fraud & Identity Theft
Google Play Protect will block the installation of sideloaded applications requesting permissions frequently abused by fraudsters.
Mobile & Wireless
Pegasus spyware from NSO Group was used in Jordan to hack the cellphones of journalists, lawyers, human rights and political activists.
Cybersecurity Funding
Goldman Sachs leads wireless threat intelligence firm Bastille Networks’ $44 million Series C funding round.
Learn about Frontier Pace Governance: a practical approach to helping IT operations move at AI speed without sacrificing security, accountability, or operational discipline.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)