Security News

Malicious AppsFomoPeek app found stealing crypto wallet keys on iPhoneA wallet-tracking app hid kernel exploits and remote commands.by Marco Leeon Sep 19, 2026Source: SlowMist

Latest

13 reports
NewSep 20, 2026Malicious App · iOSComeCome food-delivery app linked to a crypto-wallet attackResearchers say attackers could remotely push wallet-stealing code after the app was installed.Sep 20, 2026NewNewSep 19, 2026Malicious App · iOSFomoPeek app found stealing crypto wallet keys on iPhoneA wallet-tracking app hid kernel exploits and remote commands.Sep 19, 2026NewSep 1, 2026Web Attack · SafariPoisoned web packages could compromise iPhones through SafariOpening a compromised streaming site could trigger an exploit chain without installing an app.Sep 1, 2026NewJul 25, 2026Social Engineering · BankingFaceTime bank-support scam used screen sharing to steal accountsCallers impersonated support staff and pressured victims to reveal passwords and one-time codes.Jul 25, 2026NewJun 21, 2026Privacy Research · TrackingLoupe shows how apps can fingerprint users without ATTApps can combine device signals and persistent identifiers even when ad tracking is disabled.Jun 21, 2026NewMay 1, 2026Hardware Safety · LocationAirTag lawsuits highlight gaps in anti-stalking safeguardsDelayed alerts and removable speakers can make unknown trackers harder to detect quickly.May 1, 2026NewApr 3, 2026Malicious App · iOSSparkCat returned with English-language targetingThe upgraded variant used deeper obfuscation and expanded its keyword detection to English.Apr 3, 2026NewMar 18, 2026System Vulnerability · WebKitApple fixed a WebKit cross-origin flaw with a silent updateThe flaw could weaken isolation between tabs and embedded services in Apple system apps.Mar 18, 2026NewMar 12, 2026Trusted App · AuthenticationMicrosoft Authenticator flaw exposed login codes and deep linksAnother app could intercept authentication data when set as the device's default link handler.Mar 12, 2026NewFeb 16, 2026Security Research · PasswordsPassword-manager audit found 25 distinct attack methodsResearchers found design and cryptographic weaknesses across four mainstream password managers.Feb 16, 2026NewFeb 9, 2026Trusted App · Data ExposureAI chat app left 300 million messages publicly readablePublic Firebase rules exposed chat histories, settings and data shared by related apps.Feb 9, 2026NewFeb 9, 2026Privacy Risk · SurveillanceStalkerware vendors repeatedly exposed monitor and victim dataCommercial surveillance services are often misused and have suffered repeated data breaches.Feb 9, 2026NewFeb 5, 2025Malicious App · App StoreSparkCat scanned seed-phrase screenshots inside App Store appsOCR spyware searched photo libraries for images containing crypto-wallet recovery phrases.Feb 5, 2025