Mobile & Wireless
Affecting the open source calling library RingRTC, the bug prevented calls from ending properly.
Hi, what are you looking for?
SecurityWeek
Mobile & Wireless
The large-scale watering hole campaign has been targeting entities in the US and Europe, mainly in Ukraine.
Mobile & Wireless
The most severe is a critical flaw in Framework leading to remote code execution without user interaction.
Mobile & Wireless
Apple patched 286 vulnerabilities in iOS and macOS 27.2 and brought the fix for an exploited CoreGraphics zero-day to older iPhones.
Cybercrime
The individuals called victims and persuaded them to install an app and scan their credit cards to loot their bank accounts.
Malware & Threats
Midnight Mimosa is the name given to a malware campaign primarily running preinstalled on low-cost Android devices.
Mobile & Wireless
The patches resolve a critical vulnerability in Android’s System component that could lead to privilege escalation.
Mobile & Wireless
Apple released iOS and macOS updates to patch a zero-day vulnerability (CVE-2026-86950) reported by Meta’s product security team.
Mobile & Wireless
Google announced patches for the exploited privilege escalation vulnerability (CVE-2026-58704) on September 15.
Fraud & Identity Theft
Deceptive apps in Early Access are being used by dishonest developers for their own benefit.
Mobile & Wireless
The security updates resolve critical flaws across Android’s Framework, System, and Kernel components.
Mobile & Wireless
The bugs could be exploited to crash Safari, corrupt memory, leak sensitive data, escape the sandbox, and exfiltrate data.
Mobile & Wireless
The chain involved the exploitation of several vulnerabilities in the Samsung Members and Samsung Account applications.
Mobile & Wireless
Midnight Blizzard has been stealing Microsoft account credentials via compromised Wi-Fi networks at hospitality organizations.
Mobile & Wireless
The new Mobile Security Exposure Center creates SBOMs for enterprise mobile apps to uncover vulnerable components, dependencies and hidden risks.
Malware & Threats
A threat actor has been using the compromised appliances to target the Microsoft 365 accounts of traveling corporate employees.
Government
UNC5792 and UNC4221 have been targeting US government officials, military leaders, and allied personnel.
Mobile & Wireless
The high-severity use-after-free vulnerability in Samsung's KNOX security framework affected Android-powered Galaxy devices from the S9 through S25.
Mobile & Wireless
The vulnerability exploited by the Usbliter8 exploit cannot be patched and a PoC exploit has been released by researchers.
Malware & Threats
The Android malware allows its operators to take control of infected devices and harvest sensitive information.
Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)