Part 4 of our Android security series. Part 3 covered Certificate Pinning — this post covers a much quieter leak: your own log statements.

Part 3 of our Android security series. Part 2 covered Network Security Config — pinning builds directly on top of it.

TL;DR A Linux kernel eventpoll flaw lets a local user climb to root. Tracked as CVE-2026-43074, it scores 7.3 on CVSS. Researchers confirmed a working root shell on a Pixel 10 Pro. The full detail…

Flutter Under the Hood, Part 7 of 9: WebView bridges, deep links and exported components. The attack surface that has nothing to do with…

Summer’s winding down and millions of people are flying home after weeks abroad. Airports are packed, roaming is heavily used, and phones…

Part 5 of our Android security series. Part 4 covered Secure Logging — this post covers the other half of CRYPTO: where your encryption…

It was late in the evening when I opened the Android application for the tenth time.

TL;DR A Linux kernel CPU timer flaw lets a local user reach root. Tracked as CVE-2026-64560, it scores 7.0 on CVSS. Researchers confirmed a root shell on a Pixel 10 Pro. The full details and proof…

How I Used a SIM-less Xiaomi to Ride a Robotaxi in Vegas During DEF CON

Introduction