Tag: phone
-
IMSI vs IMEI: What Your Phone Broadcasts and Who Can Read It
Tags: phoneIMSI and IMEI are IDs your phone shares with networks. Learn how they differ, how attackers get them, and why rotating your IMSI blunts tracking. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/imsi-vs-imei-what-your-phone-broadcasts-and-who-can-read-it/
-
Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users’ Computers
A browser extension that can run scripts on claude.ai could make Claude Desktop run code on a person’s computer, researchers at Forever Security, an endpoint security company, showed in a test.The attack needs Dispatch, a Claude feature that lets people send tasks from their phone to Claude Desktop. The flaw that makes this possible can…
-
Hackers Use Fake Streaming Apps to Spread Mirax Android Malware and Steal Bank Accounts
Hackers are using streaming app lures to distribute Mirax. This Android banking trojan lets operators remotely control victims’ phones and initiate fraudulent transfers. Estimated losses reach millions of dollars, although confirmed cases capture only part of the campaign’s impact. The operation remained active when Group-IB published its November 5 investigation. Researchers linked the infections through…
-
Android SMS of Death Flaw: How to Check If Your Phone Is Patched
Google’s November security update fixes a critical Android vulnerability that can interrupt cellular calls through a hidden message. Here’s how to check your device. The post Android SMS of Death Flaw: How to Check If Your Phone Is Patched appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-android-sms-of-death-cve-2026-58882-patch/
-
Hackers Target iPhones and Android Phones: Here’s What We Know
Hackers are targeting outdated iPhones and Android phones through infected websites to steal passwords and sensitive data. Here’s how to protect your device. The post Hackers Target iPhones and Android Phones: Here’s What We Know appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-iphone-android-hackers-infected-websites/
-
New GhostMap Android Vulnerability Can Crash Phones Permanently Without Opening an App or Granting Permissions
Bitdefender researchers have revealed a vulnerability called GhostMap that affects Android devices. This vulnerability can cause phones to become stuck in a continuous crash loop immediately after a specially crafted application is installed. The demonstration app contains no executable code, requests no permissions, and does not need to be launched. To recover, users may need…
-
Cryptohack Roundup: $37M Chinese Scam Suspect Extradited
Also: BTCPay, Mercado, Polymarket Hacks. This week, a $37 million scam suspect was extradited, BTCPay wallets were drained, Trezor warned of tampering, robbers who stole $8 million were sentenced, Mercado reported a $46 million breach, Polymarket offered refunds and a phone theft cost $14,000. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/cryptohack-roundup-37m-chinese-scam-suspect-extradited-a-33303
-
Scammers capitalize on GTA 6 hype to push malware and crypto cons
Scammers are offering supposed leaked builds, early copies and phone versions of Grand Theft Auto VI (GTA 6) weeks before the game’s November 19 launch, Netcraft warned in a … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/05/gta-6-scams-fake-leaks-early-access/
-
GhostMap Bug Leaves Android Phones Stuck in Reboot Loop
Bitdefender warns that unfixed GhostMap bug could force users to factory reset their device First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ghostmap-bug-android-phones-stuck/
-
A banking malware sample led researchers to an Android bug that can loop-crash phones
Bitdefender Labs researchers built an Android app that contains no executable code and requests no permissions, and installing it leaves a Pixel 10 in a crash loop that can … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/05/ghostmap-android-bug-research/
-
Hackers exploited iOS and Android flaws to infect phones
Researchers say group may have been Kremlin-sponsored in search of diplomatic targets. First seen on arstechnica.com Jump to article: arstechnica.com/security/2026/11/hackers-exploited-ios-and-android-flaws-to-infect-phones/
-
Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction
A critical Android flaw could allow an attacker to run code on a phone without any user action remotely, Google said in its November security bulletin.The flaw, CVE-2026-58868, affects Android 14 through 17. Phones get the fix with security patch level 2026-11-01 or later, which phone makers and carriers send on their own schedules.As of…
-
Germany says lawmakers’ iPhones may have been hacked with spyware
German lawmakers and a filmmaker are among the people who received notifications from Apple warning that their phones may have been hacked. First seen on techcrunch.com Jump to article: techcrunch.com/2026/11/02/germany-says-lawmakers-iphones-may-have-been-hacked-with-spyware/
-
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 121
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter uCreator: virtualization-based Android spyware platform targeting WeChat, Telegram and other messaging apps deepveindrilling.com: Magento CMS block loader hits 953 stores CLAUDE CODE FOUND SPYWARE ON MY FAMILY’S PHONES AND A BACKDOOR ON MY MAC…
-
SMS of Death: Android under attack, an invisible SMS can block calls and emergency services
SMS of Death lets attackers crash Android call services with a hidden, zero-click message, blocking phone calls, even emergency calls too. A specially manipulated SMS message is enough to crash Android’s phone service, interrupt ongoing calls, and temporarily render the smartphone unusable. The attack requires no interaction from the victim and can even compromise the…
-
New Android SMS of Death exploit can remotely crash unpatched phones
A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed “SMS of Death” and tracked as CVE-2026-58882, that lets attackers remotely disrupt cellular service or crash phones by sending a specially crafted text message. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-android-sms-of-death-exploit-can-remotely-crash-unpatched-phones/
-
SS7 and Diameter Attacks: How Signaling Flaws Expose Your Phone
Flaws in SS7 and Diameter signaling protocols can allow attackers to track phone locations, intercept calls and SMS verification codes, and impersonate subscribers without compromising their devices. Cape explains how these attacks exploit trust between networks and how its security-focused mobile service helps defend against them. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ss7-and-diameter-attacks-how-signaling-flaws-expose-your-phone/
-
Fake IT help desk callers got by on little more than names and email addresses
Attackers posing as IT help desk staff contacted employees by phone, email and Microsoft Teams in the third quarter of 2026 and talked them into opening remote access … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/30/cisco-talos-it-help-desk-vishing/
-
New Zero-Click Android Vulnerability Lets Attackers Crash Phones With a Single SMS
A recently discovered Android vulnerability, referred to as SMS of Death, allows attackers to crash a phone’s telephony process with just one malformed SMS, without any interaction from the victim. Researcher Mark B reports that this flaw can disconnect active calls, including emergency calls, and leads to persistent service disruptions when malicious messages remain in…
-
Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls
A flaw in Telegram for Android allowed an attacker to run code on a victim’s phone via a voice call once the victim answered, according to security startup NebuSec.The attacker needed only an ordinary Telegram account. Telegram fixed the flaw in version 12.10.4 of the app, released in late September, and NebuSec disclosed it on…
-
Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls
A flaw in Telegram for Android allowed an attacker to run code on a victim’s phone via a voice call once the victim answered, according to security startup NebuSec.The attacker needed only an ordinary Telegram account. Telegram fixed the flaw in version 12.10.4 of the app, released in late September, and NebuSec disclosed it on…
-
Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls
A flaw in Telegram for Android allowed an attacker to run code on a victim’s phone via a voice call once the victim answered, according to security startup NebuSec.The attacker needed only an ordinary Telegram account. Telegram fixed the flaw in version 12.10.4 of the app, released in late September, and NebuSec disclosed it on…
-
Japan Airlines warns of data breach as country grapples with multiple cyber incidents
Hackers stole passport numbers, frequent flyer numbers, email addresses and phone numbers for about 2,000 customers. First seen on therecord.media Jump to article: therecord.media/japan-airlines-warns-of-breach-country-grapples-with-incidents
-
Smashing Security podcast #490: How Jared Kushner’s iPhone was allegedly hacked twice
Dutch spies, Russian hackers and Jared Kushner’s iPhone. It sounds like the ingredients for a thriller, but according to claims in a new book the US President’s son-in-law may have been hacked twice. Is any of it true, and what does it tell us about the phones in our pockets? First seen on grahamcluley.com Jump…
-
Massive Leak Exposes 41,000 Homeland Security Workers”, Including Undercover ICE Agents
The leaked records include the locations of ICE and CBP facilities, workers’ cell phone numbers, and the members of groups tied to wiretap programs, Palantir software, and xAI’s Grok chatbot. First seen on wired.com Jump to article: www.wired.com/story/massive-leak-exposes-41000-homeland-security-workers-including-undercover-ice-agents/
-
Beware the Slasher: AI Could Kill Off Cybersecurity Pros’ Skills
Nathan Hamiel outlines potential SecOps horror in the AI midst, as core technical capabilities go the way of reading an atlas or remembering phone numbers. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/ai-kill-off-cybersecurity-pros-skills
-
Microsoft Authenticator vulnerability let rogue Android apps steal work account access
If you use Microsoft Authenticator on Android, update it. Researchers at Enclave found a flaw that let any app on your phone quietly take over your work account. The app … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/27/microsoft-authenticator-vulnerability-patchedcve-2026-80097/
-
AI-Generated Fake Bank Calls and NFC App Enabled Euro380,000 Fraud, Dutch Police Say
Dutch police arrest two men over AI-voiced bank fraud that allegedly used a fake app to steal card data from 170 victims, causing Euro380,000 in losses. Rotterdam police have arrested two men over a new type of bank fraud that used AI-generated phone calls, a fake banking app, and NFC technology to steal bank card…
-
Your Older Android Phone Is Getting a New Scam Defense, Here’s What Google Changed
Google is extending scam-call protection to Android 15 and earlier, adding safeguards against malicious apps that abuse accessibility permissions. The post Your Older Android Phone Is Getting a New Scam Defense, Here’s What Google Changed appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-google-android-scam-call-protection/
-
SPECTER Attack Uses USB Power Signals to Leak Data From Air-Gapped PCs
Researchers demonstrated SPECTER, a technique that leaks data from compromised air-gapped PCs through USB power controls, phone charging changes and peripherals. First seen on hackread.com Jump to article: hackread.com/specter-usb-power-signals-air-gapped-pcs-leak-data/