CVE-2026-20687: AppleJPEGDriver startDecoder Timeout UAF — iOS/macOS kernel vulnerability leading to deferred panic (A19 Pro, iOS 26.3 RC) https://github.com/0xjohnnydev/CVE-2026-20687-AppleJPEGDriver-UAF

GitHub - 0xjohnnydev/CVE-2026-20687-AppleJPEGDriver-UAF: CVE-2026-20687: AppleJPEGDriver startDecoder Timeout UAF — iOS/macOS kernel vulnerability leading to deferred panic (A19 Pro, iOS 26.3 RC)

CVE-2026-20687: AppleJPEGDriver startDecoder Timeout UAF — iOS/macOS kernel vulnerability leading to deferred panic (A19 Pro, iOS 26.3 RC) - 0xjohnnydev/CVE-2026-20687-AppleJPEGDriver-UAF

4.2k 1 37 35

Android Security & Malware

29 Sep, 12:27

How we found 24 Android vulnerabilities using our open source AI security agent
https://github.blog/security/how-we-found-24-android-vulnerabilities-using-our-open-source-ai-security-agent/

How we found 24 Android vulnerabilities using our open source AI security agent

A look at the targeted AI taskflows behind these findings, the bugs they uncovered, and how to run the same open-source agent on your own app.

3.9k 0 58 30

Android Security & Malware

29 Sep, 09:36

From BlackCat to Panda Workshop: Inside the Evolving C2 Panel Behind RATHat
https://www.cleafy.com/cleafy-labs/from-blackcat-to-panda-workshop-inside-the-evolving-c2-panel-behind-rathat

From BlackCat to Panda Workshop: Inside the Evolving C2 Panel Behind RATHat | Cleafy

Cleafy's TIR team analyzed the operator infrastructure behind RATHat, an Android banking trojan that abuses Accessibility Services to enable wireless debugging on the victim's phone, obtain a shell, and deploy a hidden native service outside the app. The investigation recovered three generations of ...

3.6k 0 15 26

Android Security & Malware

28 Sep, 22:51

apk-reverse: An Agent Skill for Android APK reverse engineering, debloating, ad removal, surgical dex patching, repacking, and runtime/server analysis
https://github.com/newliver666/apk-reverse

GitHub - newliver666/apk-reverse: Suitable for Android APK reverse engineering analysis

Suitable for Android APK reverse engineering analysis - newliver666/apk-reverse

3.7k 0 86 32

Android Security & Malware

28 Sep, 10:42

A native APK and DEX decompiler written in Rust
https://github.com/Ch0pin/rdx

GitHub - Ch0pin/rdx: A native APK and DEX decompiler written in Rust

A native APK and DEX decompiler written in Rust. Contribute to Ch0pin/rdx development by creating an account on GitHub.

3.9k 0 76 2 45

Android Security & Malware

28 Sep, 09:42

RemControl: AI Built the Overlays. Victims Lose their PINs
https://www.group-ib.com/blog/remcontrol-android-banking-trojan/

RemControl: AI Built the Overlays. Victims Lose their PINs

Group-IB uncovers RemControl, a new Android banking trojan targeting European, Middle Eastern and Canadian banks, whose criminal infrastructure was unknowingly built by AI.

3.6k 0 19 24

Android Security & Malware

27 Sep, 11:46

Getting root on OnePlus 15 from an untrusted app, via an audio debug service and a vendor HAL
https://blog.nns.ee/2026/09/24/oneplus-root/

Getting root on OnePlus 15 from an untrusted app, via an audio debug service and a vendor HAL | nns.ee

Chaining an AtlasService binder command injection and an olc2 HAL binder method into uid 0 with all Linux capabilities from a plain installable app on OxygenOS 16.

4.3k 1 37 51

Android Security & Malware

22 Sep, 14:01

Turn a Rooted Android Phone into an NFC Authenticator and Automation Tool for Your PC
https://www.mobile-hacker.com/2026/09/21/turn-a-rooted-android-phone-into-an-nfc-authenticator-and-automation-tool-for-your-pc/

Turn a Rooted Android Phone into an NFC Authenticator and Automation Tool for Your PC - Mobile Hacker

Do you have an older rooted Android phone sitting unused in a drawer? Instead of leaving it there, you can turn it into a practical NFC reader and USB keyboard for your computer. With a custom Android app (NFC to HID), your phone can read the unique indentation (UID) of an NFC card, key fob, […]

5.6k 0 56 8 46

Android Security & Malware

17 Sep, 18:08

RatHat: AI-Powered Mobile Threat is Here for Your Credentials & Bank Accounts
https://zimperium.com/blog/rathat-ai-powered-mobile-threat-is-here-for-your-credentials-bank-accounts

RatHat: AI-Powered Mobile Threat is Here for Your Credentials & Bank Accounts

true

6.6k 0 28 4 55

Android Security & Malware

14 Sep, 09:08

Mantax Otax: Indonesian Mobile Ransomware with Spyware Integration
https://zimperium.com/blog/mantax-otax-indonesian-mobile-ransomware-with-spyware-integration

Mantax Otax: Indonesian Mobile Ransomware with Spyware Integration

true

7.4k 0 25 44

Android Security & Malware

14 Sep, 09:04

Vwork: Weaponized Open-source Software as an Addon for Gigabud
https://www.group-ib.com/blog/vwork-app-cloning-gigabud-goldfactory/

Vwork: Weaponized Open-source Software as an Addon for Gigabud

How the Gigabud Android banking trojan abuses Shelter, an open-source app cloner, and what that means for banks, users, and defenders.

6.4k 0 18 1 47

Android Security & Malware

9 Sep, 16:37

RCE in mexc Android app via Bypass URL validation to access the WebView, JS-Bridge with Path Traversal leads to Native-Library Cache Overwrite.
https://itis911.github.io/writeups/RCE-Mexc-Andriod-App.html