CVE-2026-12960

CVE-2026-12960 Esportazione impropria dei componenti dell'app Android ASUS Router Un componente incluso nell'app Android ASUS Router com.asus.aihome era dichiarato android:exported="true" senza android:permission. Qualsiasi altra app sullo stesso dispositivo, senza alcuna autorizzazione, poteva...

JVN#70640802: "ABEMA" App for Android fails to restrict access permissions

"ABEMA" App for Android provided by AbemaTV, Inc. fails to restrict access permissions CWE-926 that allows another app installed on the user's device to access an arbitrary URL on "ABEMA" App via Intent. Impact An arbitrary website may be displayed on the app, and as a result, the user may become...

Emerging Ransomware Targets Photos, Videos on Android Devices

A new strain of ransomware has arisen in Canada, targeting Android users and locking up personal photos and videos. Called CryCryptor, it has initially been spotted pretending to be the official COVID-19 tracing app provided by Health Canada. It’s propagating via two different bogus websites that...