Screen Hijack: Visual Poisoning of VLM Agents in Mobile Environments

With the growing integration of vision-language models VLMs, mobile agents are now widely used for tasks like UI automation and camera-based user assistance. These agents are often fine-tuned on limited user-generated datasets, leaving them vulnerable to covert threats during the training process...

Dual Protection Ring: User Profiling Via Differential Privacy and Service Dissemination through Private Information Retrieval

User profiling is crucial in providing personalised services, as it relies on analyzing user behaviour and preferences to deliver targeted services. This approach enhances user experience and promotes heightened engagement. Nevertheless, user profiling also gives rise to noteworthy privacy...

Meta Adds Passkey Login Support to Facebook for Android and iOS Users

Meta Platforms on Wednesday announced that it's adding support for passkeys, the next-generation password standard, on Facebook. "Passkeys are a new way to verify your identity and login to your account that's easier and more secure than traditional passwords," the tech giant said in a post...

AndroIDS : Android-Based Intrusion Detection System Using Federated Learning

The exponential growth of android-based mobile IoT systems has significantly increased the susceptibility of devices to cyberattacks, particularly in smart homes, UAVs, and other connected mobile environments. This article presents a federated learning-based intrusion detection framework called...

GodFather Android Malware Runs Real Apps in a Sandbox to Steal Data

Zimperium zLabs reveals GodFather malware’s advanced virtualization that hijacks mobile banking and crypto apps. Learn how it steals data on your phone...

CVE-2025-2091

An open redirection vulnerability in M-Files mobile applications for Android and iOS prior to version 25.6.0 allows attackers to use maliciously crafted PDF files to trick other users into making requests to untrusted URLs...

CVE-2025-6172

Permission vulnerability in the mobile application com.afmobi.boomplayer may lead to the risk of unauthorized operation...

CVE-2025-6172

Permission vulnerability in the mobile application com.afmobi.boomplayer may lead to the risk of unauthorized operation...

CVE-2025-2091

An open redirection vulnerability in M-Files mobile applications for Android and iOS prior to version 25.6.0 allows attackers to use maliciously crafted PDF files to trick other users into making requests to untrusted URLs...

CVE-2025-2091

An open redirection vulnerability in M-Files mobile applications for Android and iOS prior to version 25.6.0 allows attackers to use maliciously crafted PDF files to trick other users into making requests to untrusted URLs...

CVE-2025-6172

Permission vulnerability in the mobile application com.afmobi.boomplayer may lead to the risk of unauthorized operation...

CVE-2025-6172

Permission vulnerability in the mobile application com.afmobi.boomplayer may lead to the risk of unauthorized operation...

CVE-2025-6172

CVE-2025-6172 affects the mobile app com.afmobi.boomplayer (TECNO/Transfon). The connected sources indicate a permission vulnerability that may allow unauthorized operations with a high impact (CVSS v3.1: 9.8, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Root cause details are limited to general “permis...

CVE-2025-2091 Open redirection in M-Files Mobile

An open redirection vulnerability in M-Files mobile applications for Android and iOS prior to version 25.6.0 allows attackers to use maliciously crafted PDF files to trick other users into making requests to untrusted URLs...

CVE-2025-2091 Open redirection in M-Files Mobile

An open redirection vulnerability in M-Files mobile applications for Android and iOS prior to version 25.6.0 allows attackers to use maliciously crafted PDF files to trick other users into making requests to untrusted URLs...

CVE-2025-2091

CVE-2025-2091 describes an open redirect in M-Files mobile applications for Android and iOS before version 25.6.0. The underlying issue allows attackers to craft PDF files that trigger requests to untrusted URLs, potentially deceiving users into visiting harmful sites. Affected software: M-Files ...

The vulnerability of the mobile device registration and mobile application deployment mechanism of Splunk Secure Gateway, a platform for operational analytics in Splunk Enterprise, arises from insufficient protection of registration data. This vulnerability allows attackers to gain unauthorized access to protected information.

The vulnerability of the mobile device registration and mobile application deployment mechanism of Splunk Secure Gateway, a platform for operational analytics in Splunk Enterprise, is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker...

PT-2025-25531 · M Files · My Files

Name of the Vulnerable Software and Affected Versions: M-Files mobile applications for Android and iOS versions prior to 25.6.0 Description: An open redirection issue allows attackers to use maliciously crafted PDF files to trick other users into making requests to untrusted URLs. This can be...

PT-2025-25536 · Unknown · Com.Afmobi.Boomplayer

Name of the Vulnerable Software and Affected Versions: com.afmobi.boomplayer affected versions not specified Description: The issue concerns a permission vulnerability in the mobile application, which may lead to the risk of unauthorized operation. Recommendations: At the moment, there is no...

Intera InHire 代码问题漏洞

Intera InHire is a mobile application from Intera. A code issue vulnerability exists in Intera InHire 20250530 and prior versions, which stems from an incorrect manipulation of parameter 29chcotoo9 resulting in a server-side request forgery...