Curated security research, vulnerabilities, advisories and tools for practitioners.

#android

Security coverage tagged android.

1.

[CVE-2023-20938] Kernel UaF to Root #1: Freeing an Object That’s Still in Use

vulnerability | 2026-10-15 00:00 | CVE-2023-20938 | eshard.com | Original ↗ | .md | #vulnerability-research | #android | #kernel

2.

Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research

research | 2026-10-16 15:36 | github.com | Original ↗ | .md | #linux | #privilege-escalation | #android

3.

Internship Offers for the 2026-2027 Season

blog | 2026-10-14 22:00 | blog.quarkslab.com | Original ↗ | .md | #vulnerability-research | #fuzzing | #android

4.

Can AI bring Mobile Application Security Analysis in-house?

research | 2026-10-05 00:00 | eshard.com | Original ↗ | .md | #ai-security | #vulnerability-research | #android

5.

Google's PageBreak Project – Real-World Findings

research | 2026-09-24 00:00 | bughunters.google.com | Original ↗ | .md | #bug-bounty | #vulnerability-research | #android

6.

Droid ASC: High-Performance On-Demand Android Decompiler Front-End for Mobile Security & AI Agents

tool | 2026-09-15 18:43 | github.com | Original ↗ | .md | #ai-security | #open-source | #android

7.

Google ARTEMIS: Natural-Language Driven Android Automation & Mobile AI Agent Framework

tool | 2026-09-12 03:00 | github.com | Original ↗ | .md | #ai-security | #automation | #mcp

8.

research | 2026-09-08 00:00 | calif.io | Original ↗ | .md | #vulnerability-research | #android | #malware-analysis

9.

Introducing Epoch: Time Travel Debugging Built for the Agentic Era

research | 2026-09-07 00:00 | eshard.com | Original ↗ | .md | #ai-security | #vulnerability-research | #android

10.

OEMpocalypse Now: A Generic Exploitation Strategy from Android untrusted app to root

research | 2026-08-31 00:00 | calif.io | Original ↗ | .md | #supply-chain | #vulnerability-research | #android

11.

SimoneAvogadro/android-reverse-engineering-skill: Claude Code skill to support Android app's reverse engineering

tool | 2026-08-30 12:11 | github.com | Original ↗ | .md | #open-source | #claude-code | #security-tool

12.

Aikido launches agentic pentesting for Android apps

blog | 2026-08-26 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #pentesting | #appsec

13.

Bypassing Android Hardware Attestation from the Analyst's Chair

research | 2026-08-10 22:00 | blog.quarkslab.com | Original ↗ | .md | #hardware-security | #android | #reverse-engineering

14.

AI Security Must Go Beyond the Model: CertiK Identifies Google EdgeTPU Vulnerabilities, Highlighting New Risks in AI Infrastructure

advisory | 2026-07-29 13:00 | certik.com | Original ↗ | .md | #ai-security | #web3 | #vulnerability-research

15.

IonStack part III: Rooting Android 17 with GhostLock

vulnerability | High | 2026-07-15 00:00 | CVE-2026-43499 | nebusec.ai | Original ↗ | .md | #public-poc | #featured | #vulnerability-research

16.

Android Deeplink Hijacking

blog | 2026-07-14 12:35 | blog.sentry.security | Original ↗ | .md | #android | #mobile-security | #deeplink

17.

I handed the epoll UAF to an agent

blog | 2026-07-13 00:00 | CVE-2026-46242 | guysrd.github.io | Original ↗ | .md | #ai-security | #kernel-security | #linux

18.

"Practical Android Software Protection in the Wild" - An Appetizer

research | 2026-06-03 22:00 | blog.quarkslab.com | Original ↗ | .md | #malware | #android | #reverse-engineering

19.

Mobile Hacking Resource Kit: Your one‑stop hub for iOS and Android pen testing

blog | 2026-06-01 12:00 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #pentesting | #android

20.

Navigating a 7-Billion-Instruction Telegram TTD Trace with an AI Agent

research | 2026-05-25 00:00 | eshard.com | Original ↗ | .md | #ai-security | #vulnerability-research | #android

21.

A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens

blog | 2026-05-13 00:00 | projectzero.google | Original ↗ | .md | #android | #exploit-chain | #zero-click

22.

blog | 2026-05-10 00:00 | guysrd.github.io | Original ↗ | .md | #vulnerability-research | #memory-safety | #use-after-free

23.

Evolving the Android & Chrome VRPs for the AI Era

blog | 2026-04-30 00:00 | bughunters.google.com | Original ↗ | .md | #ai-security | #bug-bounty | #android

24.

Canis C2 Exposed: Previously Undocumented Cross-Platform Surveillance Framework Targeting Japan

blog | 2026-04-08 00:00 | hunt.io | Original ↗ | .md | #threat-intelligence | #malware | #android

25.

The Evolution of FIDO Experiences on Android

blog | 2026-01-27 00:00 | bughunters.google.com | Original ↗ | .md | #android | #passkeys | #authentication

26.

A 0-click exploit chain for the Pixel 9 Part 1: Decoding Dolby

blog | 2026-01-14 00:00 | projectzero.google | Original ↗ | .md | #ai-security | #rce | #android

27.

A 0-click exploit chain for the Pixel 9 Part 2: Cracking the Sandbox with a Big Wave

blog | 2026-01-14 00:00 | projectzero.google | Original ↗ | .md | #rce | #privilege-escalation | #android

28.

A 0-click exploit chain for the Pixel 9 Part 3: Where do we go from here?

blog | 2026-01-14 00:00 | projectzero.google | Original ↗ | .md | #android | #mobile-security | #exploit-chain

29.

A look at an Android ITW DNG exploit

blog | 2025-12-12 00:00 | projectzero.google | Original ↗ | .md | #android | #mobile-security | #exploit

30.

Android recon for Bug Bounty hunters: A complete guide from APK extraction to mapping attack surfaces

blog | 2025-11-26 16:57 | yeswehack.com | Original ↗ | .md | #bug-bounty | #android | #mobile-security