Cybersecurity articles tagged #Android Security on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/open-source-android-ai-agent-hijacking-leads-to-host-system-rcehttps://runtimerebel.com/blog/open-source-android-ai-agent-hijacking-leads-to-host-system-rceLearn how invisible text exploits open-source Android AI agents to trigger malicious code execution on host PCs via indirect prompt injection.Tue, 21 Jul 2026 13:54:29 GMTAndroid SecurityAI AgentsPrompt InjectionRCEMobile SecurityAppagenthttps://runtimerebel.com/blog/redhook-android-malware-abusing-wireless-adb-for-local-shell-accesshttps://runtimerebel.com/blog/redhook-android-malware-abusing-wireless-adb-for-local-shell-accessRedHook Android malware leverages Wireless Debugging to obtain shell-level privileges. Learn how this threat bypasses traditional security controls.Sun, 12 Jul 2026 16:59:53 GMTRedHookAndroid SecurityADB ExploitationMobile ThreatsWireless Debugginghttps://runtimerebel.com/blog/google-gemini-hijack-command-injection-via-messaging-notificationshttps://runtimerebel.com/blog/google-gemini-hijack-command-injection-via-messaging-notificationsResearchers demonstrate how Google Gemini voice assistant can be hijacked via malicious messaging notifications to control smart homes and start video calls.Thu, 04 Jun 2026 13:16:24 GMTGoogle GeminiPrompt InjectionVoice AssistantIot SecurityAndroid Securityhttps://runtimerebel.com/blog/google-gemini-hijacked-on-android-via-poisoned-notificationshttps://runtimerebel.com/blog/google-gemini-hijacked-on-android-via-poisoned-notificationsResearchers demonstrate how WhatsApp and Slack notifications can trigger indirect prompt injection in Google Gemini, leading to memory poisoning.Wed, 03 Jun 2026 21:09:55 GMTGoogle GeminiAndroid SecurityPrompt InjectionAI Securityhttps://runtimerebel.com/blog/android-and-linux-kernel-exploitation-cve-2024-36971-and-cve-2024-21626https://runtimerebel.com/blog/android-and-linux-kernel-exploitation-cve-2024-36971-and-cve-2024-21626CISA adds Android CVE-2024-36971 and Linux CVE-2024-21626 to its KEV catalog following reports of active exploitation by sophisticated threat actors.Wed, 03 Jun 2026 17:46:16 GMTCVE-2024-36971CVE-2024-21626CISA KEVAndroid SecurityLinux KernelContainer Breakouthttps://runtimerebel.com/blog/cisa-kev-update-active-exploitation-of-cve-2022-0492-and-cve-2025-48595https://runtimerebel.com/blog/cisa-kev-update-active-exploitation-of-cve-2022-0492-and-cve-2025-48595CISA adds Linux Kernel and Android Framework vulnerabilities to its Known Exploited Vulnerabilities catalog. Prioritize patching CVE-2022-0492 and CVE-2025-48595.Tue, 02 Jun 2026 21:13:18 GMTCVE-2022-0492CVE-2025-48595CISA KEVLinux KernelAndroid Securityhttps://runtimerebel.com/blog/cve-2025-48595-android-june-2026-update-patches-exploited-zero-dayhttps://runtimerebel.com/blog/cve-2025-48595-android-june-2026-update-patches-exploited-zero-dayGoogle's June 2026 security update fixes 124 vulnerabilities, including CVE-2025-48595, a zero-day privilege escalation flaw under active exploitation.Tue, 02 Jun 2026 21:09:21 GMTCVE-2025-48595Android SecurityGooglePrivilege EscalationZero-Dayhttps://runtimerebel.com/blog/misconfigured-msal-for-android-exposes-microsoft-account-tokenshttps://runtimerebel.com/blog/misconfigured-msal-for-android-exposes-microsoft-account-tokensA vulnerability in the Microsoft Authentication Library for Android allowed unauthorized apps to intercept OAuth tokens, impacting billions of users.Tue, 02 Jun 2026 17:39:32 GMTMicrosoftAndroid SecurityMsalToken TheftIdentity Managementhttps://runtimerebel.com/blog/android-intrusion-logging-enhancing-spyware-forensics-for-high-risk-usershttps://runtimerebel.com/blog/android-intrusion-logging-enhancing-spyware-forensics-for-high-risk-usersGoogle introduces Intrusion Logging for Android to capture persistent forensic data, aiding the detection of sophisticated spyware and state-sponsored attacks.Wed, 13 May 2026 09:08:56 GMTAndroid SecuritySpyware ForensicsGoogle Advanced ProtectionMobile Threat Defensehttps://runtimerebel.com/blog/7-3m-downloads-analyzing-fraudulent-android-call-history-appshttps://runtimerebel.com/blog/7-3m-downloads-analyzing-fraudulent-android-call-history-appsResearchers discover 28 fraudulent Android apps on the Google Play Store that trick millions of users into expensive, fraudulent subscriptions.Fri, 08 May 2026 16:36:22 GMTAndroid SecurityGoogle Play StoreFleecewareFinancial FraudMobile Malwarehttps://runtimerebel.com/blog/google-android-binary-transparency-defending-against-supply-chain-attackshttps://runtimerebel.com/blog/google-android-binary-transparency-defending-against-supply-chain-attacksGoogle expands Binary Transparency to Android apps, providing a public ledger to verify app integrity and mitigate risks of mobile supply chain attacks.Wed, 06 May 2026 12:45:20 GMTAndroid SecurityBinary TransparencyGoogle PlayApp Integrityhttps://runtimerebel.com/blog/google-android-vrp-2024-updates-1-5m-for-pixel-kernel-exploitshttps://runtimerebel.com/blog/google-android-vrp-2024-updates-1-5m-for-pixel-kernel-exploitsGoogle overhauls its Vulnerability Rewards Programs, increasing payouts for complex Android exploits while devaluing bugs easily identified by AI tools.Tue, 05 May 2026 12:36:32 GMTGoogle VRPAndroid SecurityPixel Titan MChrome SecurityBug Bountyhttps://runtimerebel.com/blog/google-adjusts-bug-bounties-1-5m-android-reward-and-ai-shifthttps://runtimerebel.com/blog/google-adjusts-bug-bounties-1-5m-android-reward-and-ai-shiftGoogle updates its Vulnerability Reward Program, increasing Android zero-click payouts to $1.5 million while adjusting Chrome rewards amid an AI security surge.Fri, 01 May 2026 16:27:37 GMTGoogle VRPAndroid SecurityPixel Titan MAI SecurityChrome SecurityBug Bountyhttps://runtimerebel.com/blog/engagelab-sdk-vulnerability-protecting-crypto-wallets-from-sandbox-bypasshttps://runtimerebel.com/blog/engagelab-sdk-vulnerability-protecting-crypto-wallets-from-sandbox-bypassA flaw in EngageLab SDK exposed 50 million Android users to data theft. Learn how attackers bypass the Android sandbox to access private cryptocurrency keys.Fri, 10 Apr 2026 00:40:05 GMTEngageLab SDKAndroid SecurityCrypto Wallet VulnerabilityMicrosoft DefenderMobile Securityhttps://runtimerebel.com/blog/exposed-google-api-keys-in-android-apps-grant-gemini-accesshttps://runtimerebel.com/blog/exposed-google-api-keys-in-android-apps-grant-gemini-accessAnalysis of Google API keys found in Android apps that enable unauthorized access to Gemini AI endpoints, detailing risks and mitigation for developers.Thu, 09 Apr 2026 12:47:35 GMTGoogle API KeysAndroid SecurityGemini AIAPI SecurityData ExposureMisconfigurationhttps://runtimerebel.com/blog/threatsday-bulletin-pre-auth-chains-android-rootkits-cloud-evasionhttps://runtimerebel.com/blog/threatsday-bulletin-pre-auth-chains-android-rootkits-cloud-evasionAnalysis of the latest ThreatsDay Bulletin covering critical pre-authentication exploit chains, stealthy Android rootkits, and advanced CloudTrail evasion techniques.Thu, 02 Apr 2026 16:25:58 GMTPre AuthenticationExploit ChainAndroid SecurityRootkitCloud SecurityCloudTrail Evasionhttps://runtimerebel.com/blog/android-security-safeguards-and-uk-cyber-reporting-mandateshttps://runtimerebel.com/blog/android-security-safeguards-and-uk-cyber-reporting-mandatesAnalysis of new Android live threat detection features, the Operation Alice takedown, and updated UK cybersecurity reporting regulations for 2024.Fri, 20 Mar 2026 16:20:19 GMTAndroid SecurityOperation AliceUK Cyber RegulationRansomwareKVM Vulnerabilitieshttps://runtimerebel.com/blog/google-vrp-2025-17-1-million-paid-for-security-vulnerabilitieshttps://runtimerebel.com/blog/google-vrp-2025-17-1-million-paid-for-security-vulnerabilitiesGoogle's Vulnerability Reward Program paid a record $17.1 million in 2025, highlighting critical security research trends in Android, Chrome, and AI systems.Thu, 12 Mar 2026 16:29:22 GMTGoogle VRPAndroid SecurityChrome SecurityBug BountyAI Security