#mobilesecurity — Public Fediverse posts

The WeChat zero-click worm WeWorm hijacks accounts through unanswered calls on both Android and iOS. Tencent has fully patched the flaw.

#WeWorm #WeChat #ZeroClick #Tencent #Calif #MobileSecurity #RCE

https://securityexpress.info/weworm-wechat-zero-click-worm/?utm_source=mastodon&utm_medium=jetpack_social

Calif demonstrated a zero-click worm that takes over WeChat accounts on iOS and Android via an incoming call, with no user interaction. It requires the caller to be a contact, enabling self-propagation through compromised address books. Tencent says the vector is now mitigated. #WeChat #ZeroClick #MobileSecurity

https://cyberworldops.eu/en/wechat-zero-click-worm-hijacked-accounts-through-incoming-calls

WeWorm is the first zero-click worm to spread via WeChat calls on iOS and Android. Calif researchers found the WeChat RCE flaw - now patched by Tencent.

#WeWorm #WeChat #ZeroClick #Worm #MobileSecurity #RCE #Tencent #Cybersecurity #Calif #InfoSec

https://securityonline.info/weworm-first-zero-click-worm-wechat/?utm_source=mastodon&utm_medium=jetpack_social

iOS 26.6.1 & 18.7.10 Update: Fix iPhone Bugs Now

#TycoonWorld #iOS26 #iOS2661 #iOS18710 #Apple #AppleSecurity #iPhone #iPhoneUsers #iPhoneSecurity #iOSUpdate #AppleUpdate #SecurityUpdate #CyberSecurity #CybersecurityNews #WebKit #KernelSecurity #ImageIO #ZeroClickAttack #Spyware #MobileSecurity #AppleNews #TechNews #TechnologyNews #iPhoneUpdate #SoftwareUpdate #SecurityFlaws #Privacy #DigitalSecurity #CyberThreats #TechUpdates #LatestTechNews

https://tycoonworld.in/ios-security-update-warning-iphone-users/

Einordnung: Zero-Click-Lücken sind für Nutzer besonders unangenehm, weil man eben nichts »falsch anklicken« muss. Der Fall zeigt, wie viel Angriffsfläche schon entsteht, wenn ein Gerät eingehende Inhalte automatisch verarbeitet. Regelmäßige Sicherheitsupdates bleiben hier praktisch die einzige realistische Verteidigung.

2/2

#Android #ZeroClick #MobileSecurity #KuketzAugust

Luma is here!

This week at the inaugural @owasp MAScon in Vienna, NowSecure security researcher @oleavr unveiled Luma: the official #Frida GUI. Persistent sessions, an interactive REPL, frida-trace, and real-time collaborative editing, all in one native app across macOS, iOS, Linux, and Windows.

Luma is free and open source. NowSecure is proud to sponsor the project and contribute engineering resources to its development.

Huge congratulations to @oleavr and the entire Frida team on an incredible launch and what this release represents for the community: https://loom.ly/KRIF_LI

#Luma #ReverseEngineering #MobileSecurity #DeveloperTools #OpenSource #NowSecure #OWASPMAScon

From cleaners to creepers: The risk of mobile privilege escalation https://www.helpnetsecurity.com/2025/06/18/android-mobile-privilege-escalation-video/ #mobilesecurity #mobiledevices #smartphones #Don'tmiss #Zimperium #Android #Video #News

Mobile security is a frontline risk. Are you ready? https://www.helpnetsecurity.com/2025/04/30/zimperium-2025-global-mobile-threat-report/ #endpointsecurity #mobilesecurity #mobiledevices #mobileapps #Zimperium #Android #threats #report #survey #News #iOS

VW Cars Leak Private Data of 800,000 — ‘Volksdaten’ – Source: securityboulevard.com https://ciso2ciso.com/vw-cars-leak-private-data-of-800000-volksdaten-source-securityboulevard-com/ #SecurityBoulevard(Original) #rssfeedpostgeneratorecho #electricvehiclesecurity #softwaredefinedvehicles #connectedcarsecurity #vehiclecybersecurity #ApplicationSecurity #ChaosComputerClub #ConnectedVehicles #CyberSecurityNews #IndustrySpotlight #SecurityAwareness #SecurityBoulevard #connectedvehicle #MobileSecurity

VW Cars Leak Private Data of 800,000 — ‘Volksdaten’ – Source: securityboulevard.com https://ciso2ciso.com/vw-cars-leak-private-data-of-800000-volksdaten-source-securityboulevard-com/ #SecurityBoulevard(Original) #rssfeedpostgeneratorecho #electricvehiclesecurity #softwaredefinedvehicles #connectedcarsecurity #vehiclecybersecurity #ApplicationSecurity #ChaosComputerClub #ConnectedVehicles #CyberSecurityNews #IndustrySpotlight #SecurityAwareness #SecurityBoulevard #connectedvehicle #MobileSecurity

VW Cars Leak Private Data of 800,000 — ‘Volksdaten’ – Source: securityboulevard.com https://ciso2ciso.com/vw-cars-leak-private-data-of-800000-volksdaten-source-securityboulevard-com/ #SecurityBoulevard(Original) #rssfeedpostgeneratorecho #electricvehiclesecurity #softwaredefinedvehicles #connectedcarsecurity #vehiclecybersecurity #ApplicationSecurity #ChaosComputerClub #ConnectedVehicles #CyberSecurityNews #IndustrySpotlight #SecurityAwareness #SecurityBoulevard #connectedvehicle #MobileSecurity

👉 A new edition of the #OWASP Mobile Top 10 2023 has been released.

The blog breaks down the updated list of #vulnerabilities and provides mitigation guidelines - https://bit.ly/3RH1CQw

#owasptop10 #mobileapplications #mobilesecurity #penetrationtesting #mobileappsecurity #mobileapplicationscanning #apptrana #indusface