Security news aggregator

Latest coverage for Android

Android is Google's mobile operating system, whose apps, devices, and updates create a broad security surface for vulnerabilities and advisories.

7 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

Android is an open-source operating system for mobile devices based on the Linux kernel, supporting apps primarily written in Java and Kotlin. Its architecture enforces app sandboxing and a permission model to isolate apps and restrict access to sensitive data or system features. However, Android’s allowance for installing apps from unofficial sources increases exposure to malicious software outside the vetted app store environment.

Security risks on Android include malware distribution via sideloaded apps, privilege escalation exploiting OS or pre-installed app vulnerabilities, and data leakage through excessive app permissions. Fragmentation in device models and delayed security updates complicate patch management, making timely application of security patches and careful permission control essential defensive practices for reducing attack surfaces on Android devices. Understanding these factors is critical for managing vulnerabilities in both consumer and enterprise contexts.

Volume over time

Weekly headline count for the current query.

Showing 7 most recent headlines Filtered view

RedWing: The Android Banking Trojan You Can Rent on Telegram for Less Than a Coffee Subscription Zimperium’s zLabs team has uncovered RedWing, an Android spyware operation sold as a subscription service through Telegram, with links to Russian threat actors and apparent roots in the Oblivion malware family. It comes with documentation, tutorial videos, a referral […]

Security Affairs 8 Jul 2026, 11:09 p.m. Theme · 3 stories Android Banking Malware Russia Spyware Threat Actor Trojan

Bad Epoll (CVE-2026-46242) lets local attackers gain root on Linux and Android. The flaw was missed by AI but found by a security researcher. A newly disclosed Linux kernel vulnerability, named Bad Epoll (CVE-2026-46242), allows a local attacker with no special privileges to gain full root access on affected Linux systems and Android devices. Security updates are […]

Security Affairs 6 Jul 2026, 8:24 p.m. Incident · 2 stories CVE-2026-46242 Android Artificial Intelligence CVE Disclosure Flaw Linux Root Access Vulnerability

RustDuck is a small, evolving DDoS botnet migrating to Rust. It uses advanced encryption, anti-analysis evasion, and exploits known IoT flaws. Since February 2026, researchers at QiAnXin’s XLab have been tracking a new malware family, called RustDuck, that hijacks routers, cameras, Android set-top boxes, and exposed servers, then uses them to flood targets with junk […]

Security Affairs 1 Jul 2026, 10:25 p.m. Theme · 2 stories Android Botnet DoS Encryption Evasion Exploit Exposure Flaw IoT Malware Research Routers

Rokarolla Android malware targets 217 banking and crypto apps, steals credentials, blocks bank calls, intercepts SMS, and disables Play Protect. Zimperium’s zLabs researchers have published a detailed analysis of Rokarolla, a new Android banking trojan named after its command-and-control infrastructure. It spreads through malicious websites masquerading as TikTok and Chrome, one confirmed distribution point being […]

Security Affairs 17 Jun 2026, 11:20 p.m. Incident · 6 stories Android Banking Chrome Command and Control Credentials Cryptocurrency Finance Malware Research SMS Social Media Trojan

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Android and Linux Kernel flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Windows Shell and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the flaws added to the catalog: The first flaw added to the catalog, tracked […]

Security Affairs 3 Jun 2026, 10:43 p.m. Theme · 2 stories America Android CISA Flaw Linux Microsoft Vulnerability

Google fixed 124 Android flaws, including CVE-2025-48595, an actively exploited privilege escalation bug linked to targeted attacks. Google has released its June 2026 Android security updates, fixing 124 vulnerabilities across the mobile operating system. One flaw, tracked as CVE-2025-48595 (CVSS score of 8.4) stands out from the rest because it is already being exploited in […]

Security Affairs 3 Jun 2026, 9:44 p.m. Incident · 3 stories Actively exploited CVE-2025-48595 Android CVE Fixed Flaw Google Mobile Patch Privilege Escalation Vulnerability

BTMOB sells Android full-device takeover as a kit, no coding needed. It steals data, records screens, and hands attackers remote control for $5,000 lifetime. Most Android malware requires at least some technical competence to deploy, but the BTMOB doesn’t. The developers sell it with a built-in APK builder that lets buyers generate new malicious apps, […]

Security Affairs 29 May 2026, 8:22 p.m. Incident · 5 stories Android Malware Remote Access Trojan