Google Messages

Apple Unveils End-to-End Encryption for iPhone-to-Android RCS Messaging iPhone 18 Pro leak from the Tata Electronics data breach exposing Apple supplier lists, components, and drop-test photos RCS End-to-End Encryption

iPhone 18 Pro leak from the Tata Electronics data breach exposing Apple supplier lists, components, and drop-test photos RCS End-to-End Encryption

Apple Unveils End-to-End Encryption for iPhone-to-Android RCS Messaging

Do Son May 5, 2026

Following years of discord within the “blue and green bubble” ecosystem, Apple has not only made the...

Google Supercharges Android Scam Defenses with On-Device Gemini AI Android 17 Tap to Share Gemini Scam Detection Galaxy S26 AI Security

Android 17 Tap to Share Gemini Scam Detection Galaxy S26 AI Security

Google Supercharges Android Scam Defenses with On-Device Gemini AI

Do Son February 26, 2026

Mobile scams are growing increasingly sophisticated, blending stolen personal data with manipulative psychological tactics. However, Google is...

Android AI Scam Defense Blocks 10 Billion Monthly Threats; Users 58% More Likely to Avoid Scam Texts Than iOS Android Sideloading Verification Advanced Sideloading Android AI Scam Defense, iOS Scam Comparison

Android Sideloading Verification Advanced Sideloading Android AI Scam Defense, iOS Scam Comparison

Android AI Scam Defense Blocks 10 Billion Monthly Threats; Users 58% More Likely to Avoid Scam Texts Than iOS

Do Son November 3, 2025

In a recent blog post, Google revealed that “in the last 12 months, fraudsters have used advanced...

Wear OS Messages Flaw (CVE-2025-12080) Allows Unprivileged Apps to Send SMS/RCS Without Permission, PoC Available Wear OS Messages Intent, Confused Deputy SMS

Wear OS Messages Intent, Confused Deputy SMS

Wear OS Messages Flaw (CVE-2025-12080) Allows Unprivileged Apps to Send SMS/RCS Without Permission, PoC Available

Do Son October 29, 2025

Security researcher Gabriele Digregorio has disclosed a newly identified vulnerability in Google Messages for Wear OS, designated...

Pixel Power-Ups: AI Avatars, Watch Alerts, & Android 15’s Big Leap

Pixel 10, Google Launch Android 15

Pixel Power-Ups: AI Avatars, Watch Alerts, & Android 15’s Big Leap

Do Son March 4, 2025

Google has recently unveiled four major updates for Android 15, including AI-powered fraud detection in Google Messages,...

Google Messages Rolls Out New Protections Against Scams and Sensitive Content

Against Scams

Google Messages Rolls Out New Protections Against Scams and Sensitive Content

Do Son October 23, 2024

Google is bolstering the security of its Messages app with a suite of new features designed to...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-14894CVSS 9.8
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload...
Admin intel📅 Updated: Sep 4, 2026
CVE-2026-85046CVSS 8.8
Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code...
Admin intel📅 Updated: Sep 3, 2026
CVE-2026-32475CVSS 9.0
Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue...
Admin intel📅 Updated: Sep 2, 2026
CVE-2026-48710CVSS 6.5
Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated...
CISA KEV📅 Added to KEV: Sep 2, 2026
CVE-2026-49869CVSS 10.0
Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, AuthenticationFilter in Kestra OSS uses request.getPath().endsWith("/configs")...
CISA KEV📅 Added to KEV: Sep 2, 2026
CVE-2026-59822
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to...
CISA KEV📅 Added to KEV: Sep 2, 2026
CVE-2026-83549CVSS 7.8
Post-authentication Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability has been identified...
Admin intelCISA KEV📅 Added to KEV: Sep 2, 2026📅 Updated: Sep 1, 2026
CVE-2026-83548CVSS 10.0
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access...
Admin intelCISA KEV📅 Added to KEV: Sep 2, 2026📅 Updated: Sep 1, 2026