Group-IB uncovers RemControl, a new Android banking trojan targeting European, Middle Eastern and Canadian banks, whose criminal infrastructure was unknowingly built by AI.

A native APK and DEX decompiler written in Rust. Contribute to Ch0pin/rdx development by creating an account on GitHub.

Cleafy's TIR team analyzed the operator infrastructure behind RATHat, an Android banking trojan that abuses Accessibility Services to enable wireless debugging on the victim's phone, obtain a shell, and deploy a hidden native service outside the app. The…

A look at the targeted AI taskflows behind these findings, the bugs they uncovered, and how to run the same open-source agent on your own app.

CVE-2026-20687: AppleJPEGDriver startDecoder Timeout UAF — iOS/macOS kernel vulnerability leading to deferred panic (A19 Pro, iOS 26.3 RC) - 0xjohnnydev/CVE-2026-20687-AppleJPEGDriver-UAF

An in-the-wild iOS bug with a possible WhatsApp zero-click path.

Watch me trying to find a Whatsapp nDay, thanks to Meta and inline compiling it's not that easy !

Bitdefender has identified a malware campaign (dubbed Midnight Mimosa) running on low-cost, multi-brand Android devices built on MediaTek platforms.

A complete technical write-up of an engagement against an active Android banking-fraud operation — recon, malware internals, platform…

Hirudo replaces Indonesian banking apps with patched copies that blind their defences. We break down its patching, distribution, targeting and fraud.

By Hyunseo Shin · October 2026 · Korean version

A use-after-free in Android's Binder driver, recorded once and replayed at will. Part 1 of a full kernel exploit chain built with time travel debugging.

Doctor Web has identified a dangerous backdoor, <a href="https://vms.drweb.com/search/?q=Android.Backdoor.Baohuo.1.origin&lng=en"><b>Android.Backdoor.Baohuo.1.origin</b></a>, in maliciously modified versions of the Telegram X messenger. In addition to being…

How one exported activity in Microsoft Authenticator let an unprivileged app get tokens for any Microsoft service.

Bitdefender Labs researchers found that installing a specially crafted app can leave an Android phone stuck in a crash loop

Contribute to Gabriel2392/SVE-2026-3546 development by creating an account on GitHub.

Google and industry partners have dismantled the XCPE backdoor and botnet, which was intentionally developed and operated by OEM Videostrong Technology Co. for financial gain.

Contribute to Mobile-IoT-Security-Lab/IoTPwnBench development by creating an account on GitHub.