A flaw in the Unity Runtime (CVE-2025-59489) allows local code execution in games via DLL injection through the Android intent handler. Developers must rebuild their apps.
android
A High-severity TOCTOU race condition (CVE-2025-38352) in the Linux/Android POSIX CPU Timer subsystem can lead to kernel crashes and privilege escalation.
Google mandates a 16KB memory page size for all Android apps by Nov. 1, 2025, to improve performance. .NET MAUI 9 now natively supports the new standard.
Qualcomm unveils the Snapdragon 8 Elite Gen 5 (3nm): up to 37% faster AI, Oryon CPU, and Agentic AI architecture for proactive digital companions.
Samsung has released an emergency patch for a critical zero-day vulnerability (CVE-2025-21043) actively exploited in Android devices. Update now to protect against RCE attacks.
The future of Nova Launcher is in doubt after its founder, Kevin Barry, left the company, and the new owner, Branch, blocked plans to open-source the project.
Google will require developers to verify their identity to enable app sideloading on Android, a move intended to enhance security but with potential consequences.
Google is updating Circle to Search with continuous translation that works as you scroll. The update also adds one-tap actions for phone numbers and URLs.
CISA adds three new vulnerabilities to its KEV Catalog, including flaws in the Linux kernel, Android Runtime, and Sitecore CMS. All are being actively exploited.
Google Play Services now backs up Android's anti-theft settings to the cloud. This small change ensures your phone stays protected even after a factory reset.
Google's new Android update patches dozens of flaws, including two actively exploited vulnerabilities and a critical RCE that can be triggered without user interaction.
Google will soon require all sideloaded Android apps to come from a verified developer. The move aims to combat malware, which is 50x more common in unverified apps.
A new report reveals the Hook Android trojan has evolved into a hybrid threat with ransomware-style overlays, lockscreen bypasses, and stealthy screen-streaming.
A new report reveals a SpyNote Android RAT campaign using fake Google Play Store clones to steal data, with the malware abusing Accessibility Services for control.
A new APK teardown reveals Google is actively working on bringing its Quick Share feature to iOS, a move that could finally bridge the gap in file sharing between Android and Apple.
A new report reveals that Android droppers are evolving. They are now being re-engineered to bypass Google Play Protect and deliver a wide range of malware.
A new report reveals the Anatsa banking trojan is now targeting over 831 financial institutions worldwide. The malware is distributed via fake apps on Google Play.
Google's new Android 16 beta introduces a feature to force dark mode on apps that don't support it, solving a major usability issue for many users.
A new Android banking trojan, dubbed "Lazarus Stealer," is using sophisticated overlay attacks to steal financial credentials from users of Russian banks.
Google Translate is preparing to launch a new AI-powered "Advanced" model and a gamified "Practice" mode, which could directly challenge Duolingo.
Phishing Scam Alert: McAfee Uncovers a New Android Campaign Impersonating a Government Solar Program
A new phishing campaign in India uses fake government solar subsidy websites to trick victims into downloading a malicious app that steals UPI PINs and other data.
Google is testing a new "Calling Card" feature for Android, allowing users to personalize the incoming call screen with full-screen photos and custom fonts.