#mobilesecurity — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #mobilesecurity, aggregated by home.social.
-
CVE-2026-28576 (CVSS 10) is a SQL injection in the Android Contacts Provider. A public PoC dumps all contacts with no permissions. Patch Android 17 now.
#CVE202628576 #Android #SQLInjection #Android17 #ContactsProvider #MobileSecurity #InfoSec #DataLeak #ExploitPoC #Pixel
-
CVE-2026-28576 (CVSS 10) is a SQL injection in the Android Contacts Provider. A public PoC dumps all contacts with no permissions. Patch Android 17 now.
#CVE202628576 #Android #SQLInjection #Android17 #ContactsProvider #MobileSecurity #InfoSec #DataLeak #ExploitPoC #Pixel
-
CVE-2026-28576 (CVSS 10) is a SQL injection in the Android Contacts Provider. A public PoC dumps all contacts with no permissions. Patch Android 17 now.
#CVE202628576 #Android #SQLInjection #Android17 #ContactsProvider #MobileSecurity #InfoSec #DataLeak #ExploitPoC #Pixel
-
CVE-2026-28576 (CVSS 10) is a SQL injection in the Android Contacts Provider. A public PoC dumps all contacts with no permissions. Patch Android 17 now.
#CVE202628576 #Android #SQLInjection #Android17 #ContactsProvider #MobileSecurity #InfoSec #DataLeak #ExploitPoC #Pixel
-
CVE-2026-28576 (CVSS 10) is a SQL injection in the Android Contacts Provider. A public PoC dumps all contacts with no permissions. Patch Android 17 now.
#CVE202628576 #Android #SQLInjection #Android17 #ContactsProvider #MobileSecurity #InfoSec #DataLeak #ExploitPoC #Pixel
-
Android Malware Mantax Otax Encrypts Devices, Steals Data, and Harasses Victims
Beware of Mantax Otax, a sneaky Android malware that's encrypting devices, swiping sensitive data, and even harassing victims - all thanks to clever tricks by Indonesian operators who are using sideloaded APKs to spread the threat.
#AndroidMalware #MantaxOtax #EmergingThreats #MobileSecurity #MalwareOperations
-
Bedtime Bug Hunting at BSides Belfast 🐛
A magic-link login, one badly timed Back button and a very unexpected result.
No fancy tools—just curiosity, testing assumptions and thinking like a real user.
Thanks to everyone who came along and to the BSides Belfast team. Recording coming soon.
https://bsidesbelfast.org/schedule/
#BSidesBelfast #CyberSecurity #AppSec #MobileSecurity #ResponsibleDisclosure
-
Google Play Exposed to Deceptive App Abuse
A sneaky app, "Vice Streets: Open World", racked up over 1 million downloads on Google Play without a single public review or rating, taking advantage of the platform's Early Access feature. This feature, meant to help developers gather feedback, can also shield them from criticism - and warn signs - that might scare off users.
#DeceptiveApp #GooglePlay #MobileSecurity #EmergingThreats #AppAbuse
-
Gigabud Trojan Exploits Android Work Profiles to Evade Banking App Malware Checks
The sneaky Gigabud Trojan is exploiting Android work profiles to slip past banking app security checks, allowing it to secretly tamper with transactions and drain accounts. By creating a separate work profile, Gigabud can hide in plain sight and facilitate fraudulent payments that appear legitimate.
#AndroidBankingMalware #GigabudTrojan #RemoteAccessTrojan #Indonesia #MobileSecurity
-
MantaxOtax Malware Targets Android Devices with Ransomware and Spyware
Meet MantaxOtax, a sneaky malware that's putting Android users on high alert with its potent mix of ransomware and spyware, allowing hackers to hold your device hostage and snoop on your personal life. This hybrid threat can encrypt your files, track your location, and even siphon off sensitive info like contacts, call logs, and…
#AndroidMalware #Ransomware #Spyware #EmergingThreats #MobileSecurity
-
The WeChat zero-click worm WeWorm hijacks accounts through unanswered calls on both Android and iOS. Tencent has fully patched the flaw.
#WeWorm #WeChat #ZeroClick #Tencent #Calif #MobileSecurity #RCE
-
Calif demonstrated a zero-click worm that takes over WeChat accounts on iOS and Android via an incoming call, with no user interaction. It requires the caller to be a contact, enabling self-propagation through compromised address books. Tencent says the vector is now mitigated. #WeChat #ZeroClick #MobileSecurity
https://cyberworldops.eu/en/wechat-zero-click-worm-hijacked-accounts-through-incoming-calls
-
WeWorm is the first zero-click worm to spread via WeChat calls on iOS and Android. Calif researchers found the WeChat RCE flaw - now patched by Tencent.
#WeWorm #WeChat #ZeroClick #Worm #MobileSecurity #RCE #Tencent #Cybersecurity #Calif #InfoSec
-
WeWorm is the first zero-click worm to spread via WeChat calls on iOS and Android. Calif researchers found the WeChat RCE flaw - now patched by Tencent.
#WeWorm #WeChat #ZeroClick #Worm #MobileSecurity #RCE #Tencent #Cybersecurity #Calif #InfoSec
-
WeWorm is the first zero-click worm to spread via WeChat calls on iOS and Android. Calif researchers found the WeChat RCE flaw - now patched by Tencent.
#WeWorm #WeChat #ZeroClick #Worm #MobileSecurity #RCE #Tencent #Cybersecurity #Calif #InfoSec
-
WeWorm is the first zero-click worm to spread via WeChat calls on iOS and Android. Calif researchers found the WeChat RCE flaw - now patched by Tencent.
#WeWorm #WeChat #ZeroClick #Worm #MobileSecurity #RCE #Tencent #Cybersecurity #Calif #InfoSec
-
WeWorm is the first zero-click worm to spread via WeChat calls on iOS and Android. Calif researchers found the WeChat RCE flaw - now patched by Tencent.
#WeWorm #WeChat #ZeroClick #Worm #MobileSecurity #RCE #Tencent #Cybersecurity #Calif #InfoSec
-
#r2con2025 is back Oct 24–25, this time fully virtual! Expect talks on #mobilesecurity, malware analysis, AI-assisted RE, and more. It's not too late to be part of the agenda, the CFP is open until Oct 12! More details: https://loom.ly/eFyEuVY #radare @pancake @grepharder