“Android”

GlobalProtect (Palo Alto Networks) has local privilege escalation flaws (CVE-2026-0251) enabling local code execution and privilege gains.

Researchers link novel car head unit malware to BadBox botnet, expanding vehicle infection surface for mass abuse.

Supply-chain compromise of Android car head unit updater spreads malware to build ad-fraud and proxy botnet on vehicles.

ToxicPanda Android malware abuses VPN permissions to block Google Play and expand remote command control across apps.

Two-stage Unisoc VoLTE exploit chain achieves full Android kernel access via a specially crafted video call payload.

Flying Eagle mobile RAT-as-a-service enables multiple groups to build Android infostealers that drain victims' banking credentials.

RedHook Android malware abuses Wireless ADB to obtain shell-level access and persistence on compromised devices.

RedWing Android malware rented on Telegram enables bank fraud, stealing credentials and OTPs via device takeover.

Law enforcement and industry partners disrupted a vast proxy network, cutting off millions of compromised devices and reducing attack surface.

Unprivileged users can escalate to root via a race condition in epoll, enabling OS-level compromise on Linux and Android systems.

A single code setting bypassed protections exposing billions of Microsoft Android app downloads; immediate review of token/access handling recommended.

Google Android patches address a exploited zero-day plus 123 other flaws; prioritize devices exposed to internet or corporate networks.

New Mirai-derived botnet targets exposed ADB on IoT devices for large-scale DDoS; isolate exposed endpoints and rotate credentials.

ScarCruft trojanized a gaming platform to deploy backdoors on Windows and Android. Review supply chain and application trust.