The Hidden Life of Cheap Streaming Devices An inexpensive set-top box connected to your television could be generating illicit revenue long after the screen goes dark, entirely without your knowle…

Bitsight found Fuyao software on H96 Android TV boxes, letting operators fake ad clicks and route proxy traffic through their owners' home internet connections.

17 findings, 2 Critical, and one recurring lesson: the mobile client is never a safe place to trust

Part 4 of our Android security series. Part 3 covered Certificate Pinning — this post covers a much quieter leak: your own log statements.

Part 3 of our Android security series. Part 2 covered Network Security Config — pinning builds directly on top of it.

TL;DR A Linux kernel eventpoll flaw lets a local user climb to root. Tracked as CVE-2026-43074, it scores 7.3 on CVSS. Researchers confirmed a working root shell on a Pixel 10 Pro. The full detail…

Flutter Under the Hood, Part 7 of 9: WebView bridges, deep links and exported components. The attack surface that has nothing to do with…

Summer’s winding down and millions of people are flying home after weeks abroad. Airports are packed, roaming is heavily used, and phones…

Part 5 of our Android security series. Part 4 covered Secure Logging — this post covers the other half of CRYPTO: where your encryption…