Mobile Security

Midnight Mimosa: When Your Android Phone Arrives Already Compromised

Worried about preinstalled malware on a budget Android phone? Learn what to check before buying, when to disconnect, and why a factory reset may not solve it.

Android 17 Update: Which Security Changes Actually Protect Your Phone?

Android 17 tightens local network access, SMS OTP handling and sensitive-data sharing. Understand the limits and what users and app teams should verify.

Apple Patched CVE-2026-86950: Which iPhones and Macs Still Need the Fix?

Apple patched a CoreGraphics code-execution flaw and says it may have been used in targeted attacks. Identify affected devices, install the right update, and verify the result.

1.8 Million Android Apps Scanned for Secrets: Treat Every APK as Public

Anthropic says a suspected ShinyHunters affiliate scanned 1.8 million Android APKs for hardcoded secrets. The defensive lesson is architectural: anything shipped to a phone must be treated as recoverable.

Stop Giving Away Your Data: Android Privacy Settings That Actually Matter

Reduce tracking and unnecessary data sharing with Android's built-in settings. A practical guide to permissions, advertising, location, account history, and phone security.

Jolla Phone in 2026: Privacy Phone or Threat Model Correction?

Jolla's new Finnish phone is a useful reminder that mobile privacy is not one feature. It is an architecture, an app ecosystem, a supply chain, and a set of user tradeoffs.

The Watchdog Got Bitten: Pegasus Spyware Hit the EU Committee Investigating It

A member of the EU committee investigating Pegasus abuse was hacked with Pegasus himself. Here is how forensic researchers proved it — and how to run the same detection process yourself.

Google's Audio Memory: What If the Promises Don't Hold?

Google's new Pixel feature listens to your day and remembers it. The company says everything stays on your device. But what if it doesn't — and does it matter either way?

CallPhantom: How 28 Fake Apps Collected Payments for Data That Never Existed

ESET uncovered CallPhantom — 28 Android apps with 7.3M downloads that sold fabricated call histories. A deep dive into the fraud mechanics, billing bypass, and how to protect yourself.

Mobile Pentesting: How to Attack Android and iOS Apps Like a Professional

A practical guide to mobile application penetration testing on Android and iOS — static analysis, dynamic analysis, traffic interception, and the most common vulnerabilities found in real engagements.