Topic

Android: news, advisories and analysis

6 articlesUpdated 5 Oct 2026

CyberSecureToday covers Android across 6 articles published between 10 Sep 2026 and 5 Oct 2026. The coverage includes 4 vulnerability advisories. 4 advisories are rated critical or high severity, and 1 involves a flaw listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on Android most often intersect with Mobile Security, Banking Trojan and AOSP, with Telecom & Media the most affected sector. The most recent story, “Android October 2026 Security Bulletin Addresses Zero-Interaction System Privilege Escalation Flaws (CVE-2026-28640)”, was published 5 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSHigh
Android October 2026 Security Bulletin Addresses Zero-Interaction System Privilege Escalation Flaws (CVE-2026-28640)
Google published the Android October 2026 bulletin fixing high-severity System elevation of privilege flaws (CVE-2026-28640) requiring zero user interaction.
Mei-Lin Chen5 Oct 20268 min read
ThreatsCloud & SaaSCritical
Google Pixel Cellular Modem Zero-Day Flaw Exploited in Targeted Mobile Attacks
CISA adds Google Pixel baseband modem flaw CVE-2026-58704 to its KEV catalog following active zero-day exploitation against high-value target devices.
Priya Raman16 Sep 202610 min read
NewsCloud & SaaS
Google September 2026 Android Bulletin Patches Critical System Zero-Click RCE Flaws
Google’s September 2026 Android security update resolves 34 vulnerabilities, led by critical zero-click remote code execution defects in the Android System framework.
Mei-Lin Chen14 Sep 20267 min read
ThreatsTelecom & MediaHigh
Attackers exploit Google Play Early Access loop to distribute deceptive malware apps to millions
Bitdefender reveals threat actors are exploiting Google Play’s Early Access program to bypass user reviews and star ratings, pushing deceptive apps with over 1M downloads.
Aisha Noor12 Sep 20265 min read
NewsBanking & Fintech
StreamRAT Android banking trojan targeted 570,000 European users through deceptive Meta streaming ads
ThreatFabric uncovers StreamRAT, a sophisticated Android banking trojan promoted via fraudulent Meta TV streaming ads, hijacking Accessibility services to drain accounts.
Aisha Noor12 Sep 20265 min read
ThreatsBanking & FintechHigh
Gigabud Android Banking Trojan Abuses Work Profiles to Evade Client-Side Detection
Group-IB uncovered a major evolution in the Gigabud banking trojan, which uses Android enterprise Work Profiles to isolate tampered banking apps and blind client security checks.
Mei-Lin Chen10 Sep 20265 min read

Latest coverage

Android October 2026 Security Bulletin Addresses Zero-Interaction System Privilege Escalation Flaws (CVE-2026-28640)

Google Pixel Cellular Modem Zero-Day Flaw Exploited in Targeted Mobile Attacks

Google September 2026 Android Bulletin Patches Critical System Zero-Click RCE Flaws

Attackers exploit Google Play Early Access loop to distribute deceptive malware apps to millions

StreamRAT Android banking trojan targeted 570,000 European users through deceptive Meta streaming ads

Gigabud Android Banking Trojan Abuses Work Profiles to Evade Client-Side Detection