A team of academic researchers has uncovered a new Android security exploit that raises a lot of questions about the platform’s permission system. The technique, named TapTrap, uses user interface ...

Pixnapping could be used to steal private data, including 2FA codes. Side-channel attack abuses Google Android APIs to steal data on display. Flaw is partially patched, although a more complete fix is ...

Caribou is an Android app that does what RFID cardkeys do with locked doors. Caribou remotely connects to a server managing the locks at a supposedly secure location, and exploits the servers’ poor ...

Industry observers highlight that the method could be used to carry out unauthorised transactions, redirect payments, or harvest credentials at scale. While no widespread exploitation has been ...

Ledger’s white-hat Donjon team discovered a critical MediaTek flaw allowing attackers to access PINs, messages, photos, and ...

Google is making Android sideloading easier with a new advanced setting that lets users disable app verification after a ...

Security researchers have identified a new Android malware strain named Perseus, which is currently targeting Android devices ...

The MediaTek vulnerability affecting 875 million Android phones allows SIM card exploits to bypass lock screens in seconds.

Like any other computer, smartphones are prone to some nasty malware, and the latest exploit discovered in Android is equal parts ingenious and horrifying. The last thing most Android users worry ...

On March 26, Symantec discovered 11 Android applications that were all made to appear like they were legitimate apps related to tracking cases in the Covid-19 pandemic, but which were in fact secretly ...