Mobile & Wireless
Chinese state-backed experts have found a way to identify people who use Apple's encrypted AirDrop messaging service, according to the Beijing municipal government.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Midnight Mimosa is the name given to a malware campaign primarily running preinstalled on low-cost Android devices.
Mobile & Wireless
The patches resolve a critical vulnerability in Android’s System component that could lead to privilege escalation.
Mobile & Wireless
Apple released iOS and macOS updates to patch a zero-day vulnerability (CVE-2026-86950) reported by Meta’s product security team.
Mobile & Wireless
Google announced patches for the exploited privilege escalation vulnerability (CVE-2026-58704) on September 15.
Mobile & Wireless
Android’s first security update of 2024 resolves high-severity elevation of privilege and information disclosure vulnerabilities.
Mobile & Wireless
Orange Spain’s internet went down for several hours after its RIPE account was hacked, likely after malware stole the credentials.
Mobile & Wireless
iOS zero-click attack targeting Kaspersky iPhones bypassed hardware-based security protections to take over devices.
Malware & Threats
A variant of the Chameleon Android banking trojan features new bypass capabilities and has expanded its targeting area.
Mobile & Wireless
Apple is testing a new security feature that should limit what iPhone thieves can do with a stolen phone, even if they have the...
Mobile & Wireless
New iMessage Contact Key Verification feature in Apple's iOS and macOS platforms help catch impersonators on its iMessage service.
Mobile & Wireless
Cupertino’s flagship mobile OS vulnerable to arbitrary code execution and data exposure security vulnerabilities.
IoT Security
Researchers call attention to 14 security defects that can be exploited to drop and freeze 5G connections on smartphones and routers.
Mobile & Wireless
A Bluetooth authentication bypass allows attackers to connect to vulnerable Android, Linux, and Apple devices and inject keystrokes.
Data Protection
iVerify, a seed-stage startup spun out of Trail of Bits, ships a mobile threat hunting platform to neutralize iOS and Android zero-days.
ICS/OT
Forescout has found 21 vulnerabilities in Sierra Wireless OT/IoT routers that could expose critical infrastructure organizations to remote attacks.
Mobile & Wireless
Android’s December 2023 security updates resolve 94 vulnerabilities, including several critical-severity bugs.
Malware & Threats
Zimperium has identified over 200 information-stealing Android applications targeting mobile banking users in Iran.
Mobile & Wireless
An academic researcher demonstrates BLUFFS, six novel attacks targeting Bluetooth sessions’ forward and future secrecy.
Cybercrime
Under the new rules, wireless carriers are required to notify customers of any SIM transfer requests, a measure designed to thwart fraudulent attempts by...
Mobile & Wireless
The Android security updates released this week resolve 37 vulnerabilities, including a critical information disclosure bug.
Mobile & Wireless
New iLeakage side-channel speculative execution attack exploits Safari to steal sensitive information from Macs and iPhones.
Endpoint Security
Apple patches dozens of serious security flaws in its macOS and iOS platforms, warning that hackers could launch code execution exploits.
Mobile & Wireless
Google improves Android devices’ proactive protections against malware with real-time scanning at code level.
Learn about Frontier Pace Governance: a practical approach to helping IT operations move at AI speed without sacrificing security, accountability, or operational discipline.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)