Skip to content
Threat Feed

Product

Android

5 briefs RSS
high advisory

Multiple Vulnerabilities in Samsung Android Implementations

Multiple vulnerabilities in Samsung's Android implementation allow remote or local attackers to achieve arbitrary code execution with root privileges, escalate permissions, and cause denial-of-service.

Android mobile vulnerability security-advisory informational
2t
high advisory

Linux Kernel posix-cpu-timers Use-After-Free Vulnerability

A use-after-free vulnerability in the Linux kernel posix-cpu-timers subsystem, identified as CVE-2026-64560, allows attackers to trigger kernel memory corruption via a race condition during non-leader thread exec() calls.

Linux Kernel +1 vulnerability linux-kernel cve uaf
1t 2c 1i updated
high threat

Monitoring High-Risk Sign-ins in Microsoft Entra ID

This brief details the detection of compromised cloud accounts by leveraging Microsoft Identity Protection telemetry to identify high-risk authentication events indicative of credential abuse.

exploited Microsoft Entra ID +3 cloud identity account-compromise
1r 1t
high threat

2026 FIFA World Cup: Cyber Threats and Attack Surface Analysis

The 2026 FIFA World Cup faces significant cyber threats from ransomware groups, state-aligned entities like Iran-nexus Handala Hack Team and Russia-nexus NoName057(16), and financially motivated cybercriminals, anticipating disruptive intrusions, large-scale criminal fraud, and politically driven DDoS and hack-and-leak operations targeting fans, hospitality services, and tournament infrastructure.

programmable logic controllers +5 Handala Hack Team 2026 World Cup cybersecurity threat intelligence ransomware DDoS phishing
2r 3t
critical advisory

Google Android Remote Code Execution Vulnerability

A vulnerability in Google Android allows a remote attacker to execute arbitrary code, affecting versions prior to 14, 15, 16 and 16-qpr2 before the May 4, 2026 patch.

Android rce vulnerability
2r 1t 1c