
GhostMap Android Bug Traps Phones in Boot Loop; Google Won’t Fix
Bitdefender disclosed GhostMap, an Android 10+ flaw that lets a permissionless app trap phones in an endless crash loop; Google

Bitdefender disclosed GhostMap, an Android 10+ flaw that lets a permissionless app trap phones in an endless crash loop; Google

Attackers tampered with Goddess of Victory: NIKKE PC launcher scripts on an official CDN to install the K2F remote-access agent

Google’s Chrome 157 stable release patches 213 security flaws, including seven critical memory bugs, with 12 found by Anthropic researchers

Apple sent mercenary-spyware warnings to German officials, lawmakers and journalists, and the BSI told recipients to assume their devices are

Google and partners disrupted the XCPE botnet of 1.3 million Android TV boxes and banned maker Videostrong, which it says

An attacker used stolen credentials to push a malicious script through OPSSHIELD’s cPGuard update channel, installing a backdoor and stealing

Google’s November Android bulletin patches 216 vulnerabilities, including CVE-2026-58868 and two more zero-click critical RCE bugs; no exploitation reported.

A public proof-of-concept for CVE-2026-58882 shows one malformed WAP Push text can crash Android’s phone process and loop devices; Android

Cisco Talos details VOLTA-AUTODOXER, an infostealer that sends stolen victim data to Claude, Kimi or Gemini via OpenRouter to rank

MediaTek’s November Product Security Bulletin patches 57 flaws, including six critical modem bugs that allow remote privilege escalation over radio
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.