A team of academic researchers has uncovered a new Android security exploit that raises a lot of questions about the platform’s permission system. The technique, named TapTrap, uses user interface ...

Pixnapping could be used to steal private data, including 2FA codes. Side-channel attack abuses Google Android APIs to steal data on display. Flaw is partially patched, although a more complete fix is ...

GitHub Security Lab's Taskflow Agent found 24 confirmed Android CVEs -- including a zero-permission GPS tracker in OsmAnd and a Wikimedia-wide account takeover in the Wikipedia app -- by guiding an AI ...

Researchers developed a new proof of concept for an Android Rowhammer attack that can be launched remotely. How effective is this proof of concept and what risk does it pose to Android users? The ...

Like any other computer, smartphones are prone to some nasty malware, and the latest exploit discovered in Android is equal parts ingenious and horrifying. The last thing most Android users worry ...

Caribou is an Android app that does what RFID cardkeys do with locked doors. Caribou remotely connects to a server managing the locks at a supposedly secure location, and exploits the servers’ poor ...

Jay primarily writes news and deals posts for Android Police. Before joining AP, he spent the past several years yammering on about the crazy world of Android for various tech outlets. Besides ...

Google detailed the issue in a security advisory published Friday. The exploit actually derives from a much larger bug in the Linux kernel that Android relies on. Google has discovered malicious apps ...

Pixnapping begins when a victim unknowingly installs a malicious app on their Google or Samsung phone. A new attack method demonstrated by researchers could lead to the theft of two-factor ...