Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks
More on Built-In
Other advisories
- Not ratedosv:CLEANSTART-2024-ZR04755When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were legitimately added by an administrator
- Not ratedosv:CLEANSTART-2025-WA23325Missing authorization in PostgreSQL built-in views pg_stats_ext and pg_stats_ext_exprs allows an unprivileged database user to read most common values and other statistics from CREATE STATISTICS co...
- Not ratedosv:CLEANSTART-2025-SY67080Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a document which without prompt will execute scripts built-into LibreOffice on c...
- Not ratedosv:CLEANSTART-2024-SC60568When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were legitimately added by an administrator
- Not ratedosv:CVE-2026-63402i18next: Shared built-in corruption through inherited-key deepExtend recursion
- Not ratedosv:CLEANSTART-2024-NU81381malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that...
- Not ratedosv:CLEANSTART-2026-MO80037built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability
- Highpwn_watch:embrace-ai-assistant-embedded-browsers-oct-2026EMBRACE: built-in browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop broken, Codex and VS Code still unpatched
Other news entries
- 10 ways attackers abuse AI services to hack your businessNewsCSO Online
- Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other ServersNewsThe Hacker News
- CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloudNewsThe Hacker News
- Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel FixesNewsThe Hacker News
- Parasitizing trust: How legitimate infrastructure becomes a delivery pipeline for attackersNewsCisco Talos
- Hackers hijack AOMEI update servers to secretly spread malwareNewsBleepingComputer
- Collabora Online Built-in CODE Server (NextCloud): Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit BenutzerrechtenVulnerabilityBSI CERT-Bund
- Hackers exploit Collabora RCE flaw to backdoor Nextcloud serversNewsBleepingComputer
Source: https://thehackernews.com/2026/10/hirudo-android-trojan-uses-patched.html
ID