Summer’s winding down and millions of people are flying home after weeks abroad. Airports are packed, roaming is heavily used, and phones…

Part 5 of our Android security series. Part 4 covered Secure Logging — this post covers the other half of CRYPTO: where your encryption…

It was late in the evening when I opened the Android application for the tenth time.

TL;DR A Linux kernel CPU timer flaw lets a local user reach root. Tracked as CVE-2026-64560, it scores 7.0 on CVSS. Researchers confirmed a root shell on a Pixel 10 Pro. The full details and proof…

How I Used a SIM-less Xiaomi to Ride a Robotaxi in Vegas During DEF CON

Introduction

Let’s be honest for a second. A huge chunk of people who want to get into cybersecurity or ethical hacking don’t own a beefy laptop. Maybe…

TL;DR A researcher at ByteriaLab found a zero-click flaw in Xiaomi ShareMe, also shipped as MiDrop. An attacker within Bluetooth LE range can write arbitrary files to a victim’s phone the mo…

From Smali to Frida: How Codex Accelerated My Android Security Assessment This is my first article on Medium, and I wanted to start with something that closely reflects the kind of work I enjoy most …

A single phone call with a fraudster can now result, within the same session, in a loan taken out in the victim’s name and unauthorized purchases charged to their bank card. Researchers at G…