#mobile-security

Android’s June 2026 security update fixes a Framework zero-day (CVE-2025-48595) already exploited for privilege escalation across widely deployed devices. Attackers leveraged the flaw for silent system-level access without user interaction before patches were issued. The update also addresses dozens of additional framework, kernel, and vendor component vulnerabilities across major Android versions.

Source: Google Android Security Bulletin

A stealthy Android malware campaign is hijacking NFC payment data and PINs through a trojanised HandyPay app, enabling fraudulent ATM withdrawals and contactless theft.

Source: ESET Research

Dozens of fake cryptocurrency wallet apps slipped into the iOS App Store, tricking users into revealing recovery phrases that are silently harvested and sent to attacker-controlled servers.

Source: Kaspersky Securelist

Mirax Android malware campaigns used Meta ads and GitHub-hosted droppers to infect devices, turning them into SOCKS5 residential proxy nodes while stealing credentials via overlays.

Source: Cleafy Labs

Apple confirms that devices with Lockdown Mode have successfully blocked mercenary spyware, including NSO Group’s Pegasus, protecting users from government-grade exploitation attempts.

Source: TechCrunch

Attackers weaponise the LSPosed framework to bypass SIM-binding in payment apps, intercepting SMS, spoofing identities, and funnelling OTPs to Telegram for real-time fraud.

Source: CloudSEK

Apple has rushed security fixes to older iPhones and iPads after the Coruna exploit kit — a sophisticated 23-exploit chain linked to espionage and crypto theft — was found actively targeting devices that can no longer upgrade to the latest iOS.

Source: The Hacker News