Tag

#android-security

11 posts0 followers

Explore Hashnode

Alternatives

404 Founders3d ago · 6 min read

Microsoft Authenticator Handed Over Work Tokens to a Zero-Permission App

A malicious Android app with no permissions, no kernel exploit, and no user interaction beyond installation could silently obtain access tokens, refresh tokens, and ID tokens for the victim's Microsof

404-founders.com

ArshadSep 2 · 5 min read

A Recursion Bug That Could Compromise an Android Phone

As developers, we have all seen bugs caused by recursion. When recursion goes out of control, we usually expect something simple: Stack overflow → application crashes → fix the bug. But what if that s

blog.arshadakl.in

David TimothyAug 31 · 12 min read

Google Quietly Killed MTE on the Pixel 11, and It's Worse Than It Sounds

GrapheneOS spent a week porting to the Pixel 11 series and hit a wall. Not a driver quirk, not a locked bootloader thing. ARM hardware memory tagging is missing. Not disabled in firmware behind a flag

digitalunpacked.hashnode.dev

Manuel SpataroAug 14 · 15 min read

How Can I Tell If My Phone Is Being Tracked? Beyond the Usual Warning Signs

Smartphones have become much more than communication devices. They are used to authenticate identities, access cloud services, exchange confidential information, store contacts, manage professional re

mobile-cybersecurity.hashnode.dev

Yogeshwar PeelaJul 18 · 13 min read

FAM CTF: The Library to The Endpoint Writeup

Executive Summary FAM is a mobile CTF challenge distributed as an Android APK (fam-ctf.apk) with four staged flags, each themed around a different layer of the app's Firebase backend: The Library (nat

exploitnotes.hashnode.dev

DarkStarJul 4 · 12 min read

XuperTV (formerly MagisTV): The Largest Residential Proxy Botnet Ever Built - Disguised as an IPTV App

TL;DR: XuperTV, a popular Latin American IPTV app with millions of downloads, contains a hidden P2P proxy network that turns every user's device into a residential relay node. Our analysis confirms th

thedevbox.hashnode.dev

Amal PKJun 5 · 10 min read

Part 1: Introduction to Android Security: Architecture, Sandbox, IPC, and System Protections

Before diving into Android exploitation, reverse engineering, or fuzzing, it’s important to understand one thing clearly: Android is not easy to break by design. It is built as a layered, security-f

blog.amalpk.in

Virusis BlogMar 16 · 5 min read

16/03/2026 Cyber Security Briefly News - Global Cyber Defense Intensifies Amid Persistent Threat Landscape

📋 Top Headlines at a Glance 45,000 malicious IP addresses taken down, 94 suspects arrested Android 17 Blocks Non-Accessibility Apps from Accessibility API to Prevent Malware Abuse OpenAI says ChatGPT ads are not rolling out globally for now Payload...

blog.virusis.com

Amr MohammedFeb 23 · 6 min read

Cyclic Scanner - Android Service Exploitation Walkthrough

Overview The lab description makes one thing very clear: this challenge is about exploiting an Android Service to achieve RCE. There is no confusion about the goal, and there is no need to explain wha

amrmoadel.hashnode.dev

Gaurav VishwakarmaDec 21, 2025 · 9 min read

Securing Mobile Apps from 'GhostPairing': A Developer's Guide to Preventing Account Hijacks in 2025

In the ever-evolving landscape of mobile technology, convenience often battles security. As we step into 2025, a sophisticated threat known as 'GhostPairing' looms large, silently undermining the trust users place in your applications. This isn't jus...

blogs.gaurav.one

Search Hashnode