Like any other computer, smartphones are prone to some nasty malware, and the latest exploit discovered in Android is equal parts ingenious and horrifying. The last thing most Android users worry ...

That can be enough for attackers to install spyware and read your messages, track your location, record you through the phone ...

Pixnapping could be used to steal private data, including 2FA codes. Side-channel attack abuses Google Android APIs to steal data on display. Flaw is partially patched, although a more complete fix is ...

Caribou is an Android app that does what RFID cardkeys do with locked doors. Caribou remotely connects to a server managing the locks at a supposedly secure location, and exploits the servers’ poor ...

On March 26, Symantec discovered 11 Android applications that were all made to appear like they were legitimate apps related to tracking cases in the Covid-19 pandemic, but which were in fact secretly ...

An Android 16 VPN bypass has been confirmed, affecting all VPN apps and exposing your real IP address online, but Google has marked the vulnerability report as won't fix.

Microsoft’s .NET MAUI lets developers build cross-platform apps in C#, but its use of binary blob files poses new risks by bypassing Android’s DEX-based security checks. New Android malware is using ...

A VPN, or virtual private network, is software that encrypts your internet traffic and masks your IP address. It allows you ...

Google has confirmed a critical security vulnerability across Android versions 14, 15 and 16 that requires no user interaction or elevated execution privileges.

Android 16 has a bug that lets apps route traffic outside your VPN tunnel and expose your real IP address, even with strict VPN settings enabled.

Amnesty International on Friday said it determined that a zero-day exploit sold by controversial exploit vendor Cellebrite was used to compromise the phone of a Serbian student who had been critical ...