[android]

October 5, 2026

• Android 17's Advanced Protection restricts accessibility-service access to apps verified as Accessibility Tools, cutting off the API path that most Android banking malware and overlay fraud depends on (The Hacker News). · Detection & Defense

in Citrix Names the NetScaler SAML Zero-Day and Ships an Emergency Patch

September 25, 2026

• File-notification systems leak behaviour across Linux, Android, Windows and macOS (ACM CCS, 15–19 November, The Hague). On Windows, watching C:\ reports the full path of every file touched anywhere on the system regardless of permissions and across users — Microsoft calls it an undocumented feature, and the response earned a Pwnie nomination for lamest vendor response 2026. On Linux, an inotify watch on a readable directory reports events for files the attacker cannot read, including /dev/input for inter-keystroke timing. On Android, FileObserver bypasses the FUSE per-app storage view, demonstrated against WhatsApp. The authors say they are unaware of in-the-wild exploitation. inoti.fyi, The Register · Vulnerability Research
• Android 17 enforces certificate transparency and breaks custom CAs — worth planning for if you intercept app traffic with your own root. HTTP Toolkit · Vulnerability Research
• Corp MDM Android spyware targets logistics firms via fake Google Play pages branded CEVA and TKW Logistics, delivering com.corp.mdm disguised as a system service that steals incoming SMS and redirects calls. Have I Been Squatted, The Hacker News · Threat Activity

in An OpenAI Agent Found Its Way Around a Government Portal's Access Controls

July 12, 2026

Exploit Chains, Poisoned Packages, and AI Agents Turned Against Their Owners

Android 17 users face a public browser-to-kernel exploit chain combining Firefox JIT RCE (CVE-2026-10702) with kernel exploits for full device compromise. U-Boot firmware has six critical signature-verification flaws affecting 50+ stable releases and embedded devices worldwide, enabling arbitrary code execution and root-of-trust bypass. AI coding agents are now targets: Ghostcommit hides prompt-injection payloads in PNG images to steal environment secrets, while HalluSquatting weaponizes AI model hallucinations to register fake package names and deliver botnets to trusting developers. The jscrambler npm package was compromised with a Rust infostealer that executes on installation across Windows, macOS, and Linux.