Mobile Malware Threat Intelligence

Mobile malware targets smartphones and tablets through malicious apps, fake app stores, and SMS-based attack vectors. Banking trojans, spyware, and adware campaigns increasingly target both Android and iOS platforms. defend.network tracks mobile threats that pose risks to enterprise environments through BYOD policies and mobile device management gaps.

GitHub, Gitea, Google Dialogflow hit by active exploits; RedWing Android malware-as-service

GitHub Agentic Workflows leak private repo data via public issues; Gitea CVE-2026-20896 authentication bypass actively exploited; RedWing Android malware rented as fraud service on Telegram.

Fortinet actively exploited; Rokarolla targets 217 banking apps; Google Vertex AI flaw

Fortinet FortiSandbox faces active in-the-wild exploitation of three CVEs. Android banking trojan Rokarolla targets 217 financial apps with 137 remote commands. Google Vertex AI SDK bucket-squatting flaw enables unauthorized model hijacking.

Google Gemini prompt injection, Microsoft 365 token theft, Redis RCE patched

Google Gemini voice assistant hijackable via poisoned notifications; Microsoft 365 Android apps leak tokens; Redis RCE (CVE-2026-23479) patched; critical fuel tank systems under active attack.