This analysis explores the latest updates to the Anatsa Android malware family.

The story of how ELEGANTBOUNCER was born from the frustration of not having access to in-the-wild exploit samples, and why structural analysis beats signatures for advanced mobile threats

This report highlights the resurfacing of SpyNote activity by the same actor in a previous DTI report and provides additional information around the recent activity and changes in tactics since the prior report.

Apple’s iOS ecosystem is renowned for its sleek user interface and curated app experience, prominently displaying stock apps like Safari, Photos, and Calendar on the Home screen. However, beneath this polished surface lies a treasure trove of internal system…

Contribute to b1n4r1b01/n-days development by creating an account on GitHub.

UK-OSINT, open source intelligence, using the internet as an investigative tool, everything osint

true

sotap is an open source project in line with so(jni) logging. Any use is at your own risk. You can customize the c file then build and get the output - RezaArbabBot/SoTap

Shindan est une application SaaS, mobile et desktop qui détecte les compromissions et vulnérabilités sur smartphones et tablettes, sans accès aux données personnelles. Obtenez un diagnostic rapide et précis pour protéger vos VIP et collaborateurs.

Many people believe that smartphones are somehow less of a target for threat actors.

WhatsApp zero-day vulnerability CVE-2025-55177 is currently under active exploitation, with a critical advisory issued as attackers target iOS and Mac devices.

Cyble Research and Intelligence Labs (CRIL) has uncovered “SikkahBot”, a new Android malware campaign targeting students in Bangladesh since July 2024.

In the ever-evolving landscape of mobile application security, SSL pinning has become a crucial defense mechanism against man-in-the-middle…

In our latest research we describe how droppers on Android are the silent malware gate keepers.

Comprehensive vulnerability database for your open source projects and dependencies.

On August 20th, Apple released an out-of-band security fix for its main operating systems. This patch allegedly fixes CVE-2025-43300, an out-of-bounds write, addressed with improved bounds checking in the ImageIO framework. In this blog post we provide a…

Covering the pros and cons of emulators versus real devices, and how to configure Magisk, Burp, Frida, Medusa and other mobile hacking tools.

CoRCTF 2025 - CoRPhone: Android Kernel Pwn. Contribute to 0xdevil/corphone development by creating an account on GitHub.