STAR Labs uncovered YuanKong, a multi-tenant Android RAT that steals banking PINs and passwords, streams screens, controls devices remotely and abuses Wireless Debugging for shell-level access.
A critical Capacitor vulnerability, CVE-2026-103922, could expose app data and native capabilities through vulnerable WebView navigation on Android and iOS.
GitHub Security Lab used its open-source AI Taskflow Agent to uncover 24 Android vulnerabilities, including flaws affecting OsmAnd and the Wikipedia Android app.
Zimperium researchers uncovered RatHat, an Android malware strain that combines Accessibility abuse, local ADB pairing, banking overlays and persistent native components to steal credentials and regain access even after the visible app is removed.
Uday Patil Sep 17, 2026 8 min read
Type at least 2 characters to search articles live...