October 9, 2026
- Mobile malware, two angles: low-cost Android handsets are shipping with firmware-embedded Midnight Mimosa, which silently installs apps, commits ad fraud and enrols devices as residential proxies (BleepingComputer); and Novinarya targets 81 financial apps via package enumeration, WebView phishing, regex-driven SMS and notification interception, resolving live C2 from encrypted dead-drop URLs planted in a Basalam shop profile (STAR Labs). · Threat Activity
in Third NetScaler RCE in a Month Lands on the Same SAML Surface