Apple has introduced a new security feature called Memory Integrity Enforcement (MIE) in its latest devices — the iPhone 17 and iPhone Air — powered by the company’s new A19 and A19 Pro chips. The feature promises always-on memory safety protection designed to stop advanced spyware and exploit attempts at…
Google has released its September 2025 Android security update, patching 120 vulnerabilities, including two zero-day flaws already exploited in targeted attacks. The update addresses weaknesses across multiple Android components, with fixes available for devices running supported versions. The Two Zero-Days Under Attack Google confirmed active exploitation of two privilege escalation…
WhatsApp has patched a critical 0-day vulnerability actively exploited against iOS and macOS users. The flaw, tracked as CVE-2025-55177, enabled attackers to deploy zero-click spyware capable of stealing sensitive data without any user interaction. Meta, WhatsApp’s parent company, confirmed that the bug was exploited in targeted attacks against “specific users”…
Security researchers have uncovered a Facebook malvertising campaign spreading Brokewell spyware to Android devices. The campaign uses fake TradingView ads to lure victims into downloading a trojanized app, which then steals cryptocurrency wallet details, personal data, and other sensitive information. How the Malware Works According to researchers, attackers cloned TradingView…
The AI researchers identified a surge on July 26, 2025 in malicious applications impersonating prominent financial institutions, launching a wave of phishing apps aimed at stealing customer login information. Victims across multiple countries reported unauthorized transactions within hours of installing the fake software, calling attention to a spike in banking…
The SS7 surveillance attack, disclosed on July 19, 2025, involves a covert tracking method used by a surveillance vendor exploiting flaws in the Signaling System No. 7 (SS7) protocol. This exploit enables attackers to pinpoint mobile phone locations without telecom or user consent. This article details the technical mechanics of the vulnerability, its…
A sophisticated DMV phishing scam 2025 campaign is wreaking havoc across the United States, successfully deceiving thousands of drivers with convincing text messages that appear to originate from legitimate state motor vehicle departments. These fraudulent SMS attacks are harvesting everything from Social Security numbers to credit card details by exploiting…
