GhostMap este o vulnerabilitate Android descoperită de Bitdefender care poate bloca complet telefonul imediat după instalare.

Google and industry partners have dismantled the XCPE malware botnet consisting of more than 1.3 million Android TV streaming TV boxes that Google says its manufacturer intentionally infected with malware...

✓ Domain abuse monitoring helps identify digital threats, but the Android SMS of Death exploit highlights why vulnerability intelligence and patch management matter.

At a Glance Malware Family XCPE botnet (x.cpe / com.oemservice firmware backdoor and com.abc.nexus loader) Threat Actor Confirmed attribution to hardware manufacturer Videostrong Technology Co. Target / Victims Over 1.3 million Android TV set-top boxes, telehealth devices, karaoke machines, and digital signs; severed access to over 10 million affiliate bots Delivery Vector

TL;DR Google's November 2026 Android Security Bulletin fixes 216 vulnerabilities across two patch levels. The worst is a critical Framework flaw that allows remote code execution with no user interaction. This Android security update also patches 22 other critical bugs in System, the kernel and chipset components. Patch level 2026-11-05 fixes every issue in this month's bulletin. Three critical bugs allow zero-click remote code execution on Android 14 through 17.

TL;DR MediaTek published its November 2026 product security bulletin fixing 57 security flaws across multiple chipset architectures. The update addresses six critical MediaTek vulnerabilities in cellular modem components that allow remote privilege escalation. Device owners must install upcoming firmware updates from their smartphone manufacturers to protect their devices. Why It Matters MediaTek is the world's largest mobile system-on-chip supplier by shipment volume.

Android SMS of Death: Zero-Click Flaw Crashes Calls According to a recent report by technology outlet Gigazine on October 30, security researcher Mark Blaschczyk has uncovered a severe flaw. He discovered a formidable zero-click denial-of-service vulnerability within the Android operating system. Experts ominously dubbed this exploit the "SMS of Death". How the Zero-Click Exploit Works By simply dispatching a specially crafted text message to a targeted mobile device, an attacker can severely disrupt the recipient's calling capabilities.

https://www.osintinvestigate.com A major Android malware campaign has compromised 17,960 devices and intercepted over 7.6 million SMS messages. Discover how banking trojans use fake bank calls, phishing websites, and malicious apps to steal financial credentials, credit card details, and one-time passwords, and learn how to protect your smartphone from mobile banking fraud.

Android SMS of Death: Zero-Click Flaw Crashes Calls According to a recent report by technology outlet Gigazine on October 30, security researcher Mark Blaschczyk has uncovered a severe flaw. He discovered a formidable zero-click denial-of-service vulnerability within the Android operating system. Experts ominously dubbed this exploit the "SMS of Death". How the Zero-Click Exploit Works By simply dispatching a specially crafted text message to a targeted mobile device, an attacker can severely disrupt the recipient's calling capabilities.

Security researcher Ofek Levin recently unveiled a severe vulnerability chain named AuthMask. Specifically, this flaw tracked as CVE-2026-80097 allowed malicious Android applications to hijack corporate authentication tokens. Rogue software bypassed security barriers by impersonating legitimate Microsoft applications installed on the same device. Consequently, attackers could exfiltrate sensitive credentials and compromise corporate cloud resources effortlessly. Exploiting Authentication Broker Trust Mechanisms Microsoft Authenticator often functions as an enterprise authentication broker rather than a simple code generator.

Is VPhoneGaGa safe to use? Learn about its permissions, potential risks, privacy concerns, and what to check before installing it on your Android device.

Google expands Android scam protection with new security tools to help users detect suspicious links, calls, and mobile scams.

 A new security feature for Android has been announced by Google. The update targets mobile scams that include fraudulent messages, spoofed telephone calls, malicious links, and the attempted theft of sensitive data. The updates include enhanced scam detection using artificial intelligence, additional security measures for screen sharing, and controls to prevent unauthorized call forwarding.  It is estimated that over 5 million suspected scam calls and text messages are flagged every month by Google's existing scam detection tools in Google Phone and Google Messages. As a result of the latest enhancements, more sophisticated fraud attempts will be identified, particularly those that use prolonged conversations, fake banking communications, and social engineering to trick users into divulging sensitive information. There is also an optional setting for Enhanced Protection Mode in Google Messages that is anticipated to be available in the next few weeks. Using Google's cloud-based Gemini models to examine suspicious conversations with unknown senders, this feature strengthens existing on-device detection. By using this approach, deceptive messages can be identified whose fraudulent intent may not be immediately apparent.  This cloud-based analysis is enabled by Google's Private AI Compute environment, which allows data to be encrypted and processed in a dedicated environment that prevents unauthorized access, including Google's own. As part of the company's efforts to enhance the user experience, artificial intelligence is also being used to examine unfamiliar links before users open them.  When the Gemini Nano model on the supported device is enabled with Enhanced Protection, a real-time web signal can be used to determine if a link may be unsafe, even for newly created websites not yet included in lists of known malicious domains. In addition to providing additional context, the redesigned warnings will provide further context to users before they open links received from external contacts.  The Google company is also partnering with Android device manufacturers to expand scam alerts beyond Pixel phones in chat notifications. This feature allows potential threats to be flagged before a messaging application is opened by identifying suspicious messages directly in the notification panel.  Android Adds Safeguards Against Call-Forwarding and Screen-Sharing Scams As part of its efforts to combat phone-based fraud, Google is introducing new messaging protections. Android will automatically conceal password fields and payment information during live screen sharing sessions using Chrome and Android WebView.  The expansion is designed to prevent scammers from viewing sensitive information when requesting victims to share their screens with them. A further safeguard is targeted at call-forwarding abuse, a method that scammers use to redirect incoming calls and intercept one-time passwords or other account verification codes. This feature is currently available on Android 15 and later devices.  In addition to preventing applications from secretly activating call forwarding in the background, Android will alert users if they are tricked into entering a forwarding code through their phone dialer. Pixel and selected devices will be protected starting in early December. In addition to improving protection against bank impersonation scams, Google is enhancing the verification feature for financial calls.  Android will verify incoming calls against banks' official applications to determine if a bank has actually initiated them. If the verification is unsuccessful, the call will automatically be terminated and an alert will be sent to the recipient. A recent report by Google indicates that more than 3 million spoofed calls impersonating Banco do Brasil and Ita Unibanco have been blocked since the launch of the feature in June. The company is collaborating with additional financial institutions in order to expand the protection to more customers. This new measure will be introduced in phases, with availability dependent on the device, the operating system version and the features that are supported.  Even though these updates add additional barriers against fraudulent calls and messages, their effectiveness is subject to the availability of compatible hardware and the level of security enabled on each device.

Discover Midnight Mimosa, a dangerous Android malware campaign found in low-cost smartphones across more than 150 countries. Learn how preinstalled firmware malware works, why it threatens mobile security, and how to protect your devices.

Google on October 14, 2026 announced a new set of AI-powered Android scam defenses in an Android Security blog post, led by an opt-in Enhanced protection mode in Google Messages, as the company said its Scam Detection to...

The prominent cybersecurity firm Bitdefender recently published a comprehensive report revealing a massive malware campaign dubbed Midnight Mimosa. This insidious operation primarily targets budget-friendly Android devices. Shockingly, the malware exists on these smartphones long before the user ever powers them on for the very first time. Essentially, original equipment manufacturers (OEMs) are pre-installing this malicious software directly onto the devices. Once an unsuspecting user purchases and successfully activates their new smartphone, the dormant malware simultaneously awakens.