A newly discovered malicious program effectively turns Android phones into malicious tap machines that vacuum up payment card data.

Google spies on Android device users, starting from even before they have logged in to their Google account.

A list of topics we covered in the week of March 3 to March 9 of 2025

Android’s March 2025 security update includes two zero-days which are under active exploitation in targeted attacks.

The Android app SafetyCore was silently installed and looks at incoming and outgoing pictures to check their decency.

Android phishing apps are the latest, critical threat for Android users, putting their passwords in danger of new, sneaky tricks of theft.

Google has released patches for two zero-days and a lot of other high level vulnerabilities.

ThreatDown research has uncovered a campaign that spreads annoying adware for Android devices.

Google has issued security updates for 46 vulnerabilities, including a patch for a remote code execution flaw which has been used in limited targeted attacks.

Despite existing countermeasures, Android overlays are still used in malware attacks and phishing. What are they and what can we do?