LIVE THREAT INTELLIGENCE

Mobile
Security
Intelligence.

Real-time vulnerability tracking, technical analysis, and threat intelligence focused on Android, iOS, and mobile-first infrastructure.

View Threat Feed → Get Weekly Digest
10
CRITICAL
40
HIGH
2
EXPLOITED ITW
90
TRACKED
cypherbyte-feed — live@0.0.0.0
[SYS] CypherByte Intel Feed v2.6 — initializing...
[SYS] Connecting to NVD · Exploit-DB · GitHub Advisory
[FEED] 90 vulnerabilities loaded
MEDI
CVE-2025-48651 — In importWrappedKey of KMKeymasterAppl…
HIGH
CVE-2026-5438 — A gzip decompression bomb vulnerabilit…
HIGH
CVE-2025-54601 — An issue was discovered in the Wi-Fi d…
MEDI
CVE-2026-20403 — In Modem, there is a possible system c…
HIGH
CVE-2025-32313 — In UsageEvents of UsageEvents.java, th…
$ _
◈
Android Security
Kernel, framework, app layer
◎
Mobile Pentesting
iOS & Android assessment
◆
Exploit Research
CVE analysis & PoC review
◉
Threat Intel
Actor tracking & IOCs
// LATEST ADVISORIES

Recent Vulnerabilities

View all 90 →
MEDIUM In importWrappedKey of KMKeymasterApplet.java, there is a possible way access ke
iOS
HIGH A gzip decompression bomb vulnerability exists when Orthanc processes HTTP reque
Cross-platform
HIGH An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor amd Wear
Android
MEDIUM In Modem, there is a possible system crash due to a missing bounds check. This c
Cross-platform
HIGH In UsageEvents of UsageEvents.java, there is a possible out of bounds write due
Cross-platform
// INTELLIGENCE REPORTS

Latest Research

All reports →
CVE Analysis 7 min

CVE-2026-5438: Orthanc gzip Decompression Bomb via Unbounded Allocation

Orthanc ≤1.12.10 allocates memory based on attacker-controlled gzip metadata with no size ceiling. A crafted Content-Encoding: gzip request exhausts system memory and crashes the server.

#gzip-decompression#memory-exhaustion#denial-of-service
CVE Analysis 9 min

CVE-2025-54601: Samsung Exynos Wi-Fi Driver Double Free via ioctl Race

A race condition in Samsung's Exynos Wi-Fi driver allows concurrent ioctl callers to double-free a global variable, yielding local privilege escalation on affected Exynos SoCs.

#race-condition#double-free#ioctl-vulnerability
CVE Analysis 9 min

CVE-2025-32313: OOB Write in Android UsageEvents Parcel Deserialization

An incorrect bounds check in UsageEvents.java allows an out-of-bounds write during Parcel deserialization, enabling local privilege escalation with no user interaction required.

#memory-corruption#out-of-bounds-write#bounds-check
newsletter-signup — weekly intel digest
// SUBSCRIBE

Weekly Mobile Security Digest

Every Friday — the most critical mobile vulnerabilities, threat actor activity, and security research. No noise. No marketing. Just intelligence.

No spam. Unsubscribe anytime. ~500 words per edition.