How one exported activity in Microsoft Authenticator let an unprivileged app get tokens for any Microsoft service (CVE-2026-80097)
https://enclave.ai/blog/authmask-we-made-microsoft-authenticator-hand-over-tokens
https://enclave.ai/blog/authmask-we-made-microsoft-authenticator-hand-over-tokens
Enclave
Enclave: AuthMask: We Made Microsoft Authenticator Hand Over Tokens to an App With Zero Permissions
How one exported activity in Microsoft Authenticator let an unprivileged app get tokens for any Microsoft service.
❤41
The Seven Android Trojan Families Targeting Indian Banking Apps
https://www.group-ib.com/blog/cyberdakait-seven-android-trojans-indian-banking/
https://www.group-ib.com/blog/cyberdakait-seven-android-trojans-indian-banking/
👍14
GhostMap: The Android flaw that crashes your phone before you open the app (not fixed)
https://www.bitdefender.com/en-us/blog/labs/ghostmap-android
https://www.bitdefender.com/en-us/blog/labs/ghostmap-android
Bitdefender
GhostMap: The Android flaw that crashes your phone before you open the app
Bitdefender Labs researchers found that installing a specially crafted app can leave an Android phone stuck in a crash loop
👍13
Run unsigned code in Download Mode on Samsung (run custom images on locked bootloader for Exynos) - SVE-2026-3546 (CVE-2026-21155)
https://github.com/Gabriel2392/SVE-2026-3546
https://github.com/Gabriel2392/SVE-2026-3546
GitHub
GitHub - Gabriel2392/SVE-2026-3546
Contribute to Gabriel2392/SVE-2026-3546 development by creating an account on GitHub.
❤15🔥11👍5
Android TV Box Malware: XCPE Botnet
https://cloud.google.com/blog/topics/threat-intelligence/shutting-the-door-on-the-xcpe-botnet
https://cloud.google.com/blog/topics/threat-intelligence/shutting-the-door-on-the-xcpe-botnet
Google Cloud Blog
Shutting the Door on the XCPE Botnet | Google Cloud Blog
Google and industry partners have dismantled the XCPE backdoor and botnet, which was intentionally developed and operated by OEM Videostrong Technology Co. for financial gain.
👍9
IoTPwnBench: an open-source benchmark for IoT security research, featuring 716 intentionally implemented vulnerabilities in IoT firmware images
https://github.com/Mobile-IoT-Security-Lab/IoTPwnBench
https://github.com/Mobile-IoT-Security-Lab/IoTPwnBench
GitHub
GitHub - Mobile-IoT-Security-Lab/IoTPwnBench
Contribute to Mobile-IoT-Security-Lab/IoTPwnBench development by creating an account on GitHub.
🔥10👍2
KIISU Review: A Card-Sized Flipper Zero cheaper Alternative
https://www.mobile-hacker.com/2026/11/12/kiisu-v4br-review-a-card-sized-flipper-zero-cheaper-alternative/
https://www.mobile-hacker.com/2026/11/12/kiisu-v4br-review-a-card-sized-flipper-zero-cheaper-alternative/
Mobile Hacker
KIISU V4BR Review: A Card-Sized Flipper Zero cheaper Alternative - Mobile Hacker
The Flipper Zero made portable hardware experimentation accessible to a much wider audience. The KIISU V4BR board takes a different approach to the same idea: keep the familiar Flipper ecosystem, but place it on a thin, credit-card-sized development board.…
👍8❤7