🚨 New #Android spyware Asin is targeting journalists and researchers in Arabic-speaking regions.

It spreads through fake websites impersonating government news, PDF editors, and war maps.

The apps hide #spyware behind useful features and were found on Android 15 devices.

Read: https://thehackernews.com/2026/06/android-spyware-asin-targets-arabic.html

This week’s cyber recap is stacked:

🌐 Chrome 0-day exploited
🏛️ Oracle PeopleSoft hit
🐧 Arch AUR packages poisoned
🔐 Check Point VPN attacks
📡 UniFi flaws exploited
🎣 Major phishing kit takedown
🤖 AI brands used as bait
🍎 #macOS fake installers
📦 npm/PyPI malware
📱 #Android adware
☁️ Cloud logging abuse risks
🕵️ RAT using Google Sheets
💾 Ransomware data exfil tricks

Plus urgent CVEs, tools, and expert webinars.

Read here: https://thehackernews.com/2026/06/weekly-recap-chrome-0-day-unifi.html

⚡ Another Monday, another cyber mess.

Browser bugs. EDR killers. TV botnet. #Android trojans. Splunk exploit. SocGholish cleanup. Fake crypto tools. Poisoned widgets. ClickFix lures. OpenBSD’s 27-year flaw. Entra bypass. SQL Server C2.

Read the weekly recap 🠖 https://thehackernews.com/2026/06/weekly-recap-browser-bugs-edr-killers.html

🛑 Android sideloading is getting a major new checkpoint.

Starting Sept. 30, 2026, certified #Android phones in Brazil, Indonesia, Singapore, and Thailand will block normal installs from unverified developers.

That applies beyond #Google Play, including third-party app stores and direct APK installs.

Details - https://thehackernews.com/2026/06/google-sets-sept-30-deadline-for.html

⚡ New "Bad Epoll" (CVE-2026-46242) vulnerability affects #Linux 6.4+ kernels and may reach newer #Android devices.

It can turn a local user into root; the PoC hit 99% reliability and may trigger from Chrome’s renderer sandbox.

🔗 Read how the bug works: https://thehackernews.com/2026/07/new-bad-epoll-linux-kernel-flaw-lets.html

🛑 WARNING - #Android bank fraud is being packaged for rent on Telegram.

Researchers are warning of RedWing, a mobile MaaS operation that gives buyers custom APKs, fake app-store lures, login overlays, OTP theft, and call forwarding.

82 institutions are listed as targets.

Learn more - https://thehackernews.com/2026/07/redwing-maas-packages-android-bank.html

🛑 ALERT - A VPN is supposed to hide your traffic. A new study says many free #Android VPN apps do not.

Researchers tested 281 popular apps with 2.4B+ installs:

→ 29 leak traffic, including visited sites
→ 246 contact ad/tracking servers
→ 5 could let a same-Wi-Fi attacker hijack the tunnel

The app still says “connected.”

Check whether yours is listed: https://thehackernews.com/2026/07/study-of-281-free-android-vpn-apps.html

🔥 European Union (EU) has ordered Google to open #Android features to rival AI assistants, including the camera, microphone, screen contents, locked-screen hotwords, and background app control.

Consent still applies. For six features, Google cannot require certification.

Here's what changes, and when - https://thehackernews.com/2026/07/eu-orders-google-to-open-android-mic.html

⚠️ Russian state-backed hackers are using fake CAPTCHA checks to trick Ukrainian targets into running malware on their own Windows systems.

The same campaign also uses fake security apps to backdoor #Android devices.

Read the full attack chain: https://thehackernews.com/2026/07/uac-0145-uses-clickfix-captchas-to.html

🚨 Invisible text on an #Android screen can hijack an AI agent and make it run commands on the PC controlling the phone.

Researchers tested 5 open-source frameworks. Every one failed at least six of seven attacks.

Read how the chain works: https://thehackernews.com/2026/07/open-source-android-ai-agents-could-let.html