Google removed two apps, Magic Browser, and Noise Detector, that were vehicles for the Ztorg Trojan, Kaspersky Lab said.

Dozens of Mexican journalists, lawyers, and even a child, were hit with Pegasus, commercially-produced spyware, as part of a campaign believed to be carried out by the nation’s government.

Apple has removed one of its top 10 grossing productivity apps after an independent developer’s story about fraudsters’ abuse of the App Store’s Search Ads functionality went viral.

Google has released a reCAPTCHA API for Android, a first for the mobile applications.

Moto G4 and Moto G5 model Motorola phones are vulnerable to kernel command line injection vulnerabilities.

Google removed a rooting an Android Trojan called Dvmap from Google Play that injects malicious code into an infected device’s system library.

More than half of enterprises are exposing themselves to unnecessary risk by running out-of-date versions of Flash.

Phishing sites are deploying freely available TLS certificates in order to dupe victims into thinking they’re visiting a safe site.

The market for automated credential stuffing tools is growing fast, because of a record number of breaches.

Researchers warn two features, not flaws, in Android can be used together to open devices up to attack.