CVE-2026-0006-step-2

APV leak-assisted ROP — Pixel 9 / media.swcodec Small, self-contained research package for CVE-2026-0006 APV decoder heap overflow. It demonstrates a controlled native call in media.swcodec, ending in androidlogassertNULL, NULL, "RCE-7F3A92C1" with the nonce visible in a real tombstone Abort...

What Graykey Can and Can’t Unlock

This is from 404 Media: The Graykey, a phone unlocking and forensics tool that is used by law enforcement around the world, is only able to retrieve partial data from all modern iPhones that run iOS 18 or iOS 18.0.1, which are two recently released versions of Apple's mobile operating system,...