Curated security research, vulnerabilities, advisories and tools for practitioners.

#android

Security coverage tagged android.

1.

Droid ASC: High-Performance On-Demand Android Decompiler Front-End for Mobile Security & AI Agents

tool | 2026-09-15 18:43 | github.com | original ↗ | #ai-security | #open-source | #android

2.

Google ARTEMIS: Natural-Language Driven Android Automation & Mobile AI Agent Framework

tool | 2026-09-12 03:00 | github.com | original ↗ | #ai-security | #automation | #mcp

3.

SimoneAvogadro/android-reverse-engineering-skill: Claude Code skill to support Android app's reverse engineering

tool | 2026-08-30 12:11 | github.com | original ↗ | #open-source | #claude-code | #security-tool

4.

Aikido launches agentic pentesting for Android apps

blog | 2026-08-26 00:00 | aikido.dev | original ↗ | #ai-security | #pentesting | #appsec

5.

Bypassing Android Hardware Attestation from the Analyst's Chair

blog | 2026-08-10 22:00 | blog.quarkslab.com | original ↗ | #android | #reverse-engineering | #mobile-security

6.

IonStack part III: Rooting Android 17 with GhostLock

vulnerability | High | 2026-07-15 00:00 | CVE-2026-43499 | nebusec.ai | original ↗ | #public-poc | #featured | #vulnerability-research

7.

Android Deeplink Hijacking

blog | 2026-07-14 12:35 | blog.sentry.security | original ↗ | #android | #mobile-security | #deeplink

8.

I handed the epoll UAF to an agent

blog | 2026-07-13 00:00 | CVE-2026-46242 | guysrd.github.io | original ↗ | #ai-security | #kernel-security | #linux

9.

"Practical Android Software Protection in the Wild" - An Appetizer

research | 2026-06-03 22:00 | blog.quarkslab.com | original ↗ | #malware | #android | #reverse-engineering

10.

Mobile Hacking Resource Kit: Your one‑stop hub for iOS and Android pen testing

blog | 2026-06-01 12:00 | bugcrowd.com | original ↗ | #bug-bounty | #pentesting | #android

11.

blog | 2026-05-10 00:00 | guysrd.github.io | original ↗ | #vulnerability-research | #memory-safety | #use-after-free

12.

Evolving the Android & Chrome VRPs for the AI Era

blog | 2026-04-30 00:00 | bughunters.google.com | original ↗ | #ai-security | #bug-bounty | #android

13.

Canis C2 Exposed: Previously Undocumented Cross-Platform Surveillance Framework Targeting Japan

blog | 2026-04-08 00:00 | hunt.io | original ↗ | #threat-intelligence | #malware | #android

14.

The Evolution of FIDO Experiences on Android

blog | 2026-01-27 00:00 | bughunters.google.com | original ↗ | #android | #passkeys | #authentication

15.

Android recon for Bug Bounty hunters: A complete guide from APK extraction to mapping attack surfaces

blog | 2025-11-26 16:57 | yeswehack.com | original ↗ | #bug-bounty | #android | #mobile-security

16.

Remote Control Android from PC Using scrcpy

research | 2025-11-17 10:38 | projectblack.io | original ↗ | #android | #mobile-testing | #scrcpy

17.

Injection for an athlete

research | 2025-11-14 14:07 | swarm.ptsecurity.com | original ↗ | #android | #mobile-security | #firmware

18.

Internship Offers for the 2025-2026 Season

research | 2025-10-19 22:00 | blog.quarkslab.com | original ↗ | #ai-security | #android | #reverse-engineering

19.

Building an Android Bug Bounty lab: the ultimate guide to configuring emulators, real devices, proxies and other mobile hacking tools (featuring Magisk, Burp, Frida)

blog | 2025-08-26 11:39 | yeswehack.com | original ↗ | #bug-bounty | #burp-suite | #android

20.

ERMAC V3.0 Banking Trojan: Full Source Code Leak and Infrastructure Analysis

blog | 2025-08-14 00:00 | hunt.io | original ↗ | #credential-theft | #android | #ermac

21.

Google Pixel Root Guide

research | 2025-07-12 11:49 | projectblack.io | original ↗ | #android | #mobile-testing | #google-pixel

22.

Pentesting for Android Mobile Applications

blog | 2025-05-06 15:37 | hackerone.com | original ↗ | #pentesting | #android | #mobile-security

23.

A small bug in the signature verification of AOSP OTA packages

research | 2025-04-07 22:00 | blog.quarkslab.com | original ↗ | #android | #vulnerability | #aosp

24.

The ultimate beginner’s guide to Android hacking

blog | 2025-04-09 12:00 | bugcrowd.com | original ↗ | #android | #mobile-security | #tutorial

25.

Android VRP Announces AutoRepro – $1,000 bonus for eligible submissions!

blog | 2025-03-26 00:00 | bughunters.google.com | original ↗ | #bug-bounty | #android | #rewards

26.

MoqHao Leverages iCloud and VK in Campaign Targeting Apple IDs and Android Device

blog | 2024-12-05 00:00 | hunt.io | original ↗ | #malware | #android | #ios

27.

Certificate Error Mishandling: Misuse and Abuse of the SslErrorHandler Class

blog | 2024-10-28 00:00 | bughunters.google.com | original ↗ | #vulnerability-research | #secure-coding | #android

28.

‘I like Android apps and open-source code’: HakuPiku on Bug Bounty, CTFs and his favourite targets

blog | 2024-10-28 12:48 | yeswehack.com | original ↗ | #bug-bounty | #open-source | #ctf

29.

Attacking the Samsung Galaxy A* Boot Chain

research | 2024-10-14 22:00 | blog.quarkslab.com | original ↗ | #android | #exploitation | #vulnerability

30.

Inside a Cybercriminal’s Server: DDoS Tools, Spyware APKs, and Phishing Templates

incident | 2024-10-08 00:00 | hunt.io | original ↗ | #ransomware | #android | #phishing