🔴 SMS of Death: One Text to Crash Android A new zero-click Android vulnerability (CVE-2026-58882) lets attackers disrupt cellular service with a single malicious SMS. 📱 What can an attacker do with j...

Soldier told repeatedly to lock down devices before deploying, got sextorted, court-martialed.

At a glance Malware family Mirax, an Android device takeover (DTO) RAT sold as private malware-as-a-service Threat actor Unknown affiliates of a developer using the handle "MiraxBot" Targets Retail banking customers in the META region; 20+ banks and digital wallets Delivery vector Malicious ads inside free streaming apps on Google Play, leading to an off-store dropper Key capabilities

Researchers at Bitdefender have uncovered a vulnerability dubbed 'GhostMap' that forces Android devices into an endless reboot cycle.

Men allegedly impersonated voices and images of executives to convince employees to send large payments

Exploits stole cookies from iOS 16.7 phones and hit Android phones on Chrome 139 through 145, except 143.

Google has issued its November security advisory, detailing hundreds of software vulnerabilities including critical remote code execution flaws…

Appknox is the worlds most powerful plug and play security platform which helps Developers, Security Researchers and Enterprises to build a safe and secure mobile ecosystem using a system plus human approach to outsmart smartest hackers.

A new campaign dubbed Poisoned Source utilizes compromised web analytics to deliver advanced mobile malware.

Russia’s APT29 used compromised sites and a hijacked Ukrainian analytics tracker to hit unpatched mobile devices with n-day exploits.

Appknox is the worlds most powerful plug and play security platform which helps Developers, Security Researchers and Enterprises to build a safe and secure mobile ecosystem using a system plus human approach to outsmart smartest hackers.

TL;DR In mid-October 2026, cybersecurity researchers exposed a major APT29 watering hole campaign targeting mobile devices across Europe and the United States. The attackers compromised high-profile websites and hijacked a popular Ukrainian web analytics service to profile visitors. Consequently, the threat actors delivered zero-click browser and kernel exploits to harvest sensitive data from unpatched iOS and Android phones. What Happened in the Watering Hole Operation…

Learn how to start mobile app security training with essential foundations, Android and iOS testing skills, and hands-on practice.

A zero-click "SMS of Death" vulnerability in Android (CVE-2026-58882) allows remote denial of service.