TL;DR A Linux kernel eventpoll flaw lets a local user climb to root. Tracked as CVE-2026-43074, it scores 7.3 on CVSS. Researchers confirmed a working root shell on a Pixel 10 Pro. The full detail…

Flutter Under the Hood, Part 7 of 9: WebView bridges, deep links and exported components. The attack surface that has nothing to do with…

Summer’s winding down and millions of people are flying home after weeks abroad. Airports are packed, roaming is heavily used, and phones…

Part 5 of our Android security series. Part 4 covered Secure Logging — this post covers the other half of CRYPTO: where your encryption…

It was late in the evening when I opened the Android application for the tenth time.

TL;DR A Linux kernel CPU timer flaw lets a local user reach root. Tracked as CVE-2026-64560, it scores 7.0 on CVSS. Researchers confirmed a root shell on a Pixel 10 Pro. The full details and proof…

How I Used a SIM-less Xiaomi to Ride a Robotaxi in Vegas During DEF CON

Introduction

Let’s be honest for a second. A huge chunk of people who want to get into cybersecurity or ethical hacking don’t own a beefy laptop. Maybe…

TL;DR A researcher at ByteriaLab found a zero-click flaw in Xiaomi ShareMe, also shipped as MiDrop. An attacker within Bluetooth LE range can write arbitrary files to a victim’s phone the mo…