Cybercriminals are now using portable devices, known as SMS blasters, to bypass operator filters and send thousands of fraudulent text messages.

A critical, unpatched OnePlus flaw (CVE-2025-10184) allows any app to read SMS data without permission, breaking MFA protections. PoC is available.

A critical flaw (CVE-2025-10184) in OnePlus OxygenOS allows any app to read users’ SMS/MMS data without permission. The PoC is public, but a fix is unavailable.Export to Sheets

A critical flaw in Milesight industrial routers is being exploited to launch mass smishing campaigns across Europe, exposing 572 devices and using SMS APIs to send phishing links.

The UK's CMA gave Google Strategic Market Status (SMS) over its 90% search dominance. The designation grants the regulator new powers to mandate changes in Google's search and AI services.

New York is warning residents about an "Inflation Refund" SMS phishing scam. Fraudsters impersonate the Tax Dept. to lure users to a fake site and steal SSNs and personal/financial data.

A dark web post claims 3TB of data from two Russian SMS aggregators has been stolen, posing a huge risk of mass account takeover via 2FA codes.

A flaw (CVE-2025-12080) in Google Messages for Wear OS allows any installed app to send SMS/RCS messages without permission by abusing ACTION_SENDTO intents.

CVE-2025-12080 in Google Messages on Wear OS allows any app to silently send SMS/MMS messages, bypassing permissions. Update immediately to prevent fraud.

Telegram is developing passkey authentication to replace unreliable SMS codes. The move promises a far more secure login, leveraging biometrics (Face ID/fingerprint).