Mobile Security

6 posts

/oneplus-zero-permission-root-oxygenos/oneplus-zero-permission-root-oxygenos.png
OnePlus Left a Zero-Permission Root Bug Open for 159 Days After Threatening the Researcher

September 28, 2026

An app with zero permissions can take full control of a OnePlus phone. You install it, and it is already root. OnePlus was warned in April, threatened the …

/remcontrol-android-banking-trojan/remcontrol-android-banking-trojan.png
RemControl Android Trojan Steals Banking PINs From 30 Banks and Shuts Down Google Play Protect

September 24, 2026

Your banking PIN went out live while your thumb was still on the keypad. Your pattern lock too. More than 30 banks. Europe, Canada and the Gulf. One free TV app …

/mullvad-android-vpn-kill-switch-leak/mullvad-android-vpn-kill-switch-leak.png
Mullvad Says Any Android App Can Send Your IP Past the VPN Kill Switch

September 12, 2026

Mullvad Says Any Android App Can Send Your IP Past the VPN Kill Switch Your phone kept sending its address out on a 10 second timer while the VPN kill switch …

/whatsapp-locked-android-photo-gallery/whatsapp-locked-android-photo-gallery.png
WhatsApp Video Calls Open Your Photo Gallery on a Locked Android Phone

September 3, 2026

Your locked Android phone opened its photo gallery to the person holding it. One video call and four taps did it. A Pixel on Android 17 with the newest patch …

/pixel-9-zero-click-exploit/featured-image.png
Pixel 9 Zero-Click Exploit: How a Single Audio Message Can Compromise Your Phone

January 16, 2026

Someone sends you an audio message. You don’t open it, you don’t play it, you don’t even look at your phone. And you’re already hacked. …

/ios-webkit-zero-day-iphone-compromise-cve-2025-43529/featured-image.png
Your iPhone Just Got Owned: iOS WebKit Zero-Days Require No Click (CVE-2025-43529)

January 12, 2026

Your iPhone can be compromised by loading a webpage. No click. No download. Just visit the wrong site. Apple patched this a month ago. Only 16% of users have …