Don’t get fooled by TikTok resin art scams

Resin art has become a popular corner of TikTok, with some videos attracting millions of views. But not every glossy, colorful post is what it claims to be. Scammers are using the look of handmade resin art to trick buyers, collectors, and even fellow artists into sending money for work that eith...

Call of Duty Mobile scam uses fake free points to steal player accounts

Call of Duty Mobile players should watch out for a phishing campaign disguised as a free Call of Duty Points giveaway. Victims are asked to log in with their email address and password to claim free Call of Duty Points CP, the game's premium currency. They're then redirected to a second page aski...

Beyond the Play Store: How Android threats really spread

You probably think of your phone's security the way you think of your front door: as long as you're downloading apps from the Play Store, you're safe. And for the most part, that's true. Google reviews apps before they’re published. But some apps reach your phone without ever passing through the...

Microsoft Edge (Chromium) < 148.0.3967.97 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 148.0.3967.97. It is, therefore, affected by multiple vulnerabilities as referenced in the May 31, 2026 advisory. - Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a...

Microsoft Edge (Chromium) < 149.0.4022.69 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 149.0.4022.69. It is, therefore, affected by multiple vulnerabilities as referenced in the June 15, 2026 advisory. - Inappropriate implementation in Mojo in Google Chrome on Windows prior to 149.0.7827.115 allowed a...

Microsoft Edge (Chromium) < 149.0.4022.53 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 149.0.4022.53. It is, therefore, affected by multiple vulnerabilities as referenced in the June 9, 2026 advisory. - Insufficient validation of untrusted input in Drag and Drop in Google Chrome on Android prior to...

Security update for mariadb-connector-c (important)

openSUSE security update: security update for mariadb-connector-c ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21409-1 Rating: important References: bsc1266438 Cross-References: CVE-2026-44172 CVSS scores: CVE-2026-44172 SUSE : 7.4...

ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories

Most of this week's trouble came dressed as something useful. A package stole data. A fake extension opened remote access. A safety app became spyware. An image gave hidden orders to an AI agent. Other threats hid in open systems, weak code, and normal network traffic. The threats change every...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 Exploit Configuration for realme RMX3888 D...

Exploit for Use After Free in Linux Linux_Kernel

Aristotle ADB Enable A minimal Android app that turns on AD...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 — aristotle au/KDDI Xiaomi XIG04 Local pri...

Johnson Controls XAAP Android

ADVISORY SUMMARY Successful exploitation of this vulnerability could result in an attacker obtaining confidential information from the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network...

SUSE CVE-2026-16419

Out of bounds read and write in ANGLE in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-16424

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-13037

A flaw was found in the WebView component of Google Chrome on Android. This vulnerability, known as a use-after-free, occurs when a program attempts to use memory after it has been freed, which can lead to unpredictable behavior. A local attacker could exploit this by tricking a user into opening...

Chick-fil-A loyalty accounts hijacked using stolen passwords

Fast-food chain Chick-fil-A is warning customers after attackers hijacked loyalty accounts using stolen passwords in a credential stuffing attack. Chick-fil-A says it detected suspicious login activity against some Chick-fil-A One accounts in June and launched an investigation. The company later...

OPENSUSE-SU-2026:21409-1 Security update for mariadb-connector-c

This update for mariadb-connector-c fixes the following issue: - CVE-2026-44172: mysqlrealescapestring incorrectly handled big5 bsc1266438. Changes for mariadb-connector-c: - Update to release 3.4.9. - Update to release 3.4.8: Fix compilation with GCC 15 CONC-762: always set isnull and length in...

SUSE-SU-2026:22844-1 Security update for mariadb-connector-c

This update for mariadb-connector-c fixes the following issue: - CVE-2026-44172: mysqlrealescapestring incorrectly handled big5 bsc1266438. Changes for mariadb-connector-c: - Update to release 3.4.9. - Update to release 3.4.8: Fix compilation with GCC 15 CONC-762: always set isnull and length in...

EUVD-2026-47574

Out of bounds read and write in ANGLE in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

EUVD-2026-47577

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...