Threat intelBrief2 min read
Researchers say the group planted malicious code on legitimate sites and a Ukrainian analytics service, then used known vulnerabilities to pull data from vulnerable phones.
VulnerabilitiesBrief2 min read
Bitdefender says a malformed APK can crash system_server repeatedly, and Google closed the report as not reproducible. Recovery means a factory reset or ADB, and ADB needs debugging already switched on.
Threat intelExploitedCVE-2025-43529CVSS 8.82 min read
Sekoia attributes a large-scale watering hole operation to APT29 with moderate-to-high confidence. The payloads chained already-patched browser and OS flaws, and none of them established persistence.
VulnerabilitiesCVE-2026-111585CVSS 8.82 min read
Security firm Remedio says an integer overflow in TeamViewer's screen processing can be triggered from inside an ordinary session, letting a hostile host crash or run code on the viewer's system. TeamViewer has patched it.
Threat intelBrief2 min read
A threat cluster Group-IB calls CyberDakait has used smishing and vishing to push malicious APKs that impersonate Indian banks, harvest banking credentials and mine cryptocurrency on infected phones.
