TL;DR A Linux kernel CPU timer flaw lets a local user reach root. Tracked as CVE-2026-64560, it scores 7.0 on CVSS. Researchers confirmed a root shell on a Pixel 10 Pro. The full details and proof…

How I Used a SIM-less Xiaomi to Ride a Robotaxi in Vegas During DEF CON

Introduction

Let’s be honest for a second. A huge chunk of people who want to get into cybersecurity or ethical hacking don’t own a beefy laptop. Maybe…

TL;DR A researcher at ByteriaLab found a zero-click flaw in Xiaomi ShareMe, also shipped as MiDrop. An attacker within Bluetooth LE range can write arbitrary files to a victim’s phone the mo…

From Smali to Frida: How Codex Accelerated My Android Security Assessment This is my first article on Medium, and I wanted to start with something that closely reflects the kind of work I enjoy most …

A single phone call with a fraudster can now result, within the same session, in a loan taken out in the victim’s name and unauthorized purchases charged to their bank card. Researchers at G…

In this blog, i’ll walk you through the Beginner-level lab of Secure Notes in MobileHackingLab. This is my first experience with mobile…

Exploring Shizuku, LSPatch, and LSPosed modules to modify Android apps without unlocking the bootloader or rooting your device.

Steal Google / Bank Credentials with a Fake System Update