F-Droid 2.0 Modernizes Android App Discovery but Leaves Some Privacy Tools Behind
F-Droid 2.0 brings the open-source Android repository its largest client redesign in a decade, with improved search, automatic updates and a modernized codebase. Privacy-conscious users should note that...
No Permissions Needed: OxygenOS Bugs Could Hand Root Access to Any App on a OnePlus 15
Two unpatched flaws in OnePlus's latest OxygenOS build could let an app that requests zero permissions still seize root-level control of the device, by abusing privileged system services...
RemControl Android Trojan Uses Fake Banking Screens to Steal PINs
RemControl spreads through fake streaming-app pages and overlays convincing phishing screens on top of banking apps. The Android trojan targets more than 30 financial institutions and combines credential...
QR-Code Phishing Reaches Record Levels as Attackers Shift Credential Theft to Phones
ESET says QR-code phishing accounted for about 11% of detected phishing email in the first half of 2026, with roughly 100,000 detections per month. By moving victims from...
FSB Claims Foreign Spyware Found on Russian Officials’ Phones in Targeted Espionage Campaign
Russia's FSB announced the disruption of a foreign intelligence campaign implanting advanced spyware on senior officials' mobile phones, enabling silent surveillance, communication interception, and data exfiltration consistent with...
CVE-2026-32185: Microsoft Teams for Android Vulnerability Enables Local Spoofing Attacks — Patch Available
Microsoft has patched CVE-2026-32185, a spoofing vulnerability in Microsoft Teams for Android that allows local attackers to impersonate trusted devices or content. The flaw requires no privileges to...