#apps.


Russian hackers trojanize WebEx, Zoom apps to push Starland malware

Jul 16, 2026 // 13:57

A financially motivated Russian threat actor tracked as UAT-11795 is using trojanized software to steal credentials and cryptocurrency by deploying a new backdoor called Starland […]

OkoBot Malware Framework Injects Seed Phrase Phishing Into Ledger and Trezor Apps

Jul 15, 2026 // 18:37

A malware framework called OkoBot has been running on Windows machines since April 2025, and one of its modules is built to con hardware wallet […]

Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking

Jul 10, 2026 // 16:46

Researchers ran 281 of the most popular free VPN apps on the Google Play Store through a new testing system and found that many fail […]

282 iOS Apps Found Leaking LLM API Keys and Unauthenticated AI Proxy Access

Jun 30, 2026 // 16:56

Researchers tested 444 AI chatbot apps for iPhone and found that 282 of them, nearly two-thirds, exposed paid AI access through their network traffic. In […]

New Rokarolla Android malware targets 217 banking, crypto apps

Jun 16, 2026 // 23:17

A new Android banking trojan named Rokarolla is targeting 217 banking and cryptocurrency applications using an extensive set of 137 commands. The malware is distributed […]

Six Proto6 Vulnerabilities in protobuf.js Expose Node.js Apps to RCE and DoS

Jun 10, 2026 // 10:20

Cybersecurity researchers have flagged half a dozen vulnerabilities in protobuf.js, a JavaScript and TypeScript implementation of Protocol Buffers (Protobuf), that, if successfully exploited, could result […]

New FROST Attack Lets Websites Track What Sites and Apps You Open via SSD Timing

Jun 9, 2026 // 14:07

A malicious website can work out which sites you visit and which apps you open, using nothing but JavaScript and the timing of your SSD. […]

Free Apps Are Quietly Turning Smart TVs Into Web-Scraping Proxies for AI

Jun 6, 2026 // 11:47

A researcher has reverse-engineered the iOS SDK that Bright Data embeds in consumer apps and documented how it turns devices, including always-on smart TVs, into […]

Android Spyware Asin Targets Arabic Users via Fake News, PDF and War Map Apps

Jun 5, 2026 // 17:56

Arabic-speaking users have emerged as the target of a new Android spyware codenamed Asin, according to findings from ESET. The Slovakian cybersecurity company said it […]

Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag

Jun 3, 2026 // 18:04

A development flag left switched on in production builds of several Microsoft 365 Android apps disabled the check that limits account-token sharing to trusted Microsoft […]