NewApp Digest
search bot

Android vulnerabilities

Severe Pixel vulnerability lets apps leak on-screen data like 2FA codes, Google working on December fix
AppWizard
October 14, 2025

Severe Pixel vulnerability lets apps leak on-screen data like 2FA codes, Google working on December fix

A new class of Android attacks called Pixnapping allows installed applications to monitor the content displayed by other apps without requesting permissions. This attack can capture sensitive information, including Gmail previews, Google Maps timelines, and two-factor authentication codes, by exploiting Android’s rendering APIs and a hardware side channel. Pixnapping operates by manipulating Android intents to funnel pixels from a target app into the system's rendering pipeline, using timing variations from GPU compression to recover text. The attack has been demonstrated on various devices, including Google Pixel models 6 through 9 and the Samsung Galaxy S25. In February 2025, the vulnerability was disclosed to Google, which assigned it a CVE-2025-48561 rating and classified it as high risk. A patch was released in September, but a workaround was found, leading to ongoing collaboration with Google and Samsung for further fixes. Users are advised to maintain good app hygiene, avoid unknown APKs, and promptly install security updates. The researchers have not yet developed a universal mitigation app and advocate for platform-level fixes to address the vulnerabilities.
Best Android Security Apps for Enterprise and Personal Use
AppWizard
May 20, 2025

Best Android Security Apps for Enterprise and Personal Use

Android holds a 71.65% market share as the leading mobile operating system. In 2025, users face sophisticated cyber threats such as ransomware and phishing scams. Android Enterprise provides a multi-layered defense system validated by the U.S. Department of Defense, featuring AI-driven threat detection that blocks 99.8% of malware through 100,000 daily app scans. It supports three device management models: Fully Managed Devices (COBO), Work Profiles (BYOD), and Dedicated Kiosk Mode. Recent enhancements include automated security patch deployment and hardware-backed key attestation. Leading Mobile Device Management (MDM) solutions include TinyMDM, which offers real-time location tracking and remote device wiping, and integrates with Microsoft Intune for conditional access. Harmony Mobile combines app reputation scanning with network-level phishing prevention. Emerging trends in enterprise security include AI-powered anomaly detection, with 42% of enterprises adopting Zero Trust principles, and rugged device management optimized for industrial environments. For personal protection, Bitdefender Mobile Security leads AV-Test rankings, Kaspersky Premium blocks 5.6 million malware attacks monthly, and Norton 360 Deluxe includes biometric app locking. Privacy tools like ExpressVPN and DuckDuckGo Privacy Browser enhance user security. Google's Project Zero reports a 35% decline in critical Android vulnerabilities, attributed to improved patch adoption. The convergence of enterprise and personal security solutions is emphasized, with a focus on AI/ML integration for enterprises and comprehensive protection suites for individuals.
Hidden Android app exposes millions of Pixel phones to takeover
AppWizard
August 16, 2024

Hidden Android app exposes millions of Pixel phones to takeover

A security vulnerability has been discovered in Pixel devices, stemming from a pre-installed Android application called "Showcase.apk," which has been present since 2017. This app, developed by Smith Micro for Verizon, was designed for demo mode in retail but has extensive system privileges that allow it to execute remote code and install software without user consent. Although disabled by default, it can be activated through an attack, creating a potential backdoor. The app retrieves configuration files via an unencrypted HTTP connection, posing further risks. Google has been informed of the vulnerability but has not yet issued a patch, although they plan to remove the app from supported Pixel devices. Palantir has decided to stop using Android devices due to this vulnerability and Google's slow response. Google claims there is no evidence of active exploitation and that the issue does not affect the Pixel 9 series.
More than two dozen Android vulnerabilities fixed
AppWizard
May 4, 2024

More than two dozen Android vulnerabilities fixed

Oversecured identified vulnerabilities in Xiaomi's Android applications and Google's AOSP, including unauthorized access to system privileges, theft of files, and exposure of sensitive user data. Xiaomi has since fortified its security measures, while Google swiftly applied patches to address the vulnerabilities in their ecosystem.
Search