#Mobile Security
All CosmicBytez Labs articles tagged #Mobile Security, across news, security advisories, how-to guides, and projects.
- News
Google Rolls Out AI Scam Defenses for Android Messages and Calls
Google is rolling out Gemini-powered scam detection for Android Messages and call-forwarding abuse protections to eligible devices.
- News
P7 DarkSword: New iOS Exploit Kit Variant Adds Crypto Wallet Theft and Remote Commands
A stealthier DarkSword variant called P7 extracts crypto wallet keys and keychain data locally before exfiltration, and polls for live commands.
- News
Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks
JPCERT/CC says Japan logged 119 web data-leak incidents in 2026, driven by mobile API abuse and an unauthenticated Metabase SQLi flaw (CVE-2026-72898).
- News
Android's October 2026 Security Update Patches 25 Vulnerabilities, Including 7 Critical Bugs
Google's October 2026 Android patch level fixes 25 flaws across Framework and System, with seven rated critical and none exploited in the wild.
- News
Android 17 Advanced Protection Locks Accessibility Services to Verified Tools
Android 17's Advanced Protection mode now restricts the AccessibilityService API to verified Accessibility Tools, closing a top banking-trojan vector.
- News
Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Delivery Path
Researchers released a PoC for CVE-2026-86950, a CoreGraphics bug Apple patched after targeted attacks; WhatsApp's new PDF scans hint at the delivery path.
- News
Apple Zero-Day Vulnerability Weaponized in Targeted Attacks
Apple confirms CVE-2026-86950 was used in a sophisticated spyware-style attack on specific targets; CISA set an Oct. 2 deadline for agencies.
- News
New RatHat Android Malware Uses AI to Automate Device Control
Zimperium found RatHat, an Android RAT whose AI subsystem reads accessibility trees to auto-navigate banking apps and steal credentials.
- News
Pixel Modem Zero-Day Exploited in Targeted Attacks
Google patched a Pixel modem zero-day (CVE-2026-58704) after confirming limited, targeted exploitation in the wild.
- News
New Android Malware 'Mantax Otax' Encrypts Files, Steals Data, and Harasses Victims
Mantax Otax combines Android ransomware and spyware, adding screen-streaming, OTP theft, and coercive harassment overlays to force extortion payouts.
- News
ToxicPanda 2.0 Android Banking Trojan Abuses VPN Permissions to Neutralize Google Play Protect
ToxicPanda 2.0 targets 349 financial apps across 16 countries, using VPN hijacking and ADB abuse to bypass Android security.
- Security
CVE-2026-66061: Home Assistant iOS App NFC Tag Spoofing via Universal Links
The Home Assistant iOS Companion app prior to 2026.5.0 fails to validate whether NFC or QR tag links arrive via physical scan or iOS universal link,...
- News
ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories
This week's threat landscape is defined by cheap leverage: an RCE that fires before the first prompt, a Samsung vulnerability requiring a single click, an...
- Security
CVE-2025-63823: My Safetipin Android App Exposes Hardcoded Credentials (CVSS 9.8)
A critical hardcoded credentials vulnerability in the My Safetipin Android app v5.2.1 allows remote attackers to bypass authentication and gain...
- Security
CVE-2026-2346: Critical Authorization Bypass in Menulux Mobile App
A critical CVSS 9.8 authorization bypass vulnerability in the Menulux Software Inc. Mobile App allows unauthenticated remote attackers to bypass access...
- News
Inside the Underground Business of BTMOB RAT
Flare researchers analyzed thousands of underground posts to reveal how the BTMOB Android RAT evolved from a single MaaS product into a fragmented...
- News
Flying Eagle Android RAT Traces Found on 170 Servers as Source Code Circulates
Researchers at Hunt.io have traced the Flying Eagle Android remote access trojan framework to over 170 internet-exposed control panel servers, as its...
- News
RedHook Android Malware Now Uses Wireless ADB for Shell Access
A new RedHook variant abuses Android's Wireless Debugging feature to gain shell-level privileges without a USB connection — a novel technique that...
- News
RedWing MaaS Packages Android Bank Fraud as a Telegram Rental Service
A new Android malware operation called RedWing is being rented out on Telegram as a ready-made bank-fraud service, letting even low-skill criminals take...
- News
Eight-Year-Old Samsung KNOX Flaw Exposed Millions of Galaxy Devices to Kernel Attacks
A high-severity use-after-free vulnerability lurking in Samsung's KNOX security framework for eight years left Galaxy devices from the S9 through S25...
- Security
CVE-2026-21029: Samsung Galaxy Editing Service Privilege Escalation
A high-severity vulnerability in Samsung's Galaxy Editing Service allows local attackers to execute privileged operations due to improper export of Android…
- Security
CVE-2026-49185: FieldX MDM ADB Topic Command Injection via Runtime.exec()
A critical CVSS 9.8 command injection vulnerability in the FieldX MDM adb messaging topic passes unverified payloads directly into Runtime.exec(), enabling…
- News
Android June 2026 Update Patches Exploited Zero-Day and 123 Other Vulnerabilities
Google's June 2026 Android security bulletin addresses 124 vulnerabilities including CVE-2025-48595, an actively exploited zero-day used in limited targeted…
- News
One Line of Code Put Billions of Microsoft Android App Downloads at Risk
A single development-mode setting left in production code bypassed Android protections designed to prevent unauthorized apps from accessing Microsoft account…
- News
Google Fixes One Actively Exploited Android Zero-Day, 124 Flaws in June 2026 Update
Google's June 2026 Android security update patches 124 vulnerabilities including one zero-day flaw that has been actively exploited in targeted attacks…
- News
Apple Rejected 2 Million App Store Submissions in 2025 for Security and Fraud Prevention
Apple's annual transparency report reveals the company blocked over 2 million App Store submissions, 1.1 billion accounts, and $2.2 billion in potentially...
- News
Trapdoor Android Ad Fraud Scheme Hit 659 Million Daily Bid
Researchers at HUMAN Security uncovered Trapdoor, a sophisticated Android ad fraud and malvertising operation that used 455 malicious apps and 183...
- News
Ivanti EPMM CVE-2026-6973 RCE Under Active Exploitation
Ivanti has disclosed a high-severity improper input validation vulnerability in Endpoint Manager Mobile (EPMM) that is being actively exploited in the...
- News
Fake Call History Apps Stole Payments From Users After 7.3
Cybersecurity researchers discovered 28 fraudulent Android apps on Google Play claiming to offer call history lookups, which instead enrolled users in...
- News
Ivanti Customers Confront Yet Another Actively Exploited
Attackers are actively exploiting a new zero-day vulnerability in Ivanti Endpoint Manager Mobile (EPMM), the latest in a long series of critical flaws...
- News
EngageLab SDK Flaw Exposed 50M Android Users, Including 30M
A now-patched security vulnerability in the widely used EngageLab Android SDK allowed apps on the same device to bypass the Android security sandbox and...
- News
''NoVoice'' Android Malware on Google Play Infected 2.3
A new Android malware named NoVoice was discovered hiding in over 50 apps on the Google Play Store, with a combined download count of at least 2.3...
- News
Android 17 Blocks Non-Accessibility Apps from Accessibility
Google is testing a new Android Advanced Protection Mode enforcement in Android 17 Beta 2 that automatically strips non-accessibility apps of their...
- News
Android March 2026 Security Update Patches 129
Google's March 2026 Android security bulletin addresses 129 vulnerabilities, including CVE-2026-21385 — an actively exploited zero-day in a Qualcomm...
- News
PromptSpy: First Android Malware to Weaponize Generative AI
ESET researchers discover PromptSpy, the first known Android malware family that abuses Google's Gemini AI at runtime to dynamically navigate device UIs...
- News
ZeroDayRAT Mobile Spyware Enables Total Surveillance of iOS
A new mobile spyware platform called ZeroDayRAT supports Android 5-16 and iOS up to version 26, providing real-time camera streaming, keylogging, 2FA...