Full Android kernel exploit chain built on CVE-2023-20938, a use-after-free in Binder, on a Pixel 6 running Android 12
https://www.eshard.com/blog/kernel-uaf-1-trigger
LEAD: LLM-Based Static Analysis of Session Hijacking Vulnerabilities in Android Deep Links
https://blog.cykor.kr/2026/10/LEAD-LLM-Based-Static-Analysis-of-Android-Deep-Links
The phone was compromised before the user turned it on: the rise of Midnight Mimosa
https://www.bitdefender.com/en-us/blog/labs/midnight-mimosa-malware
CVE-2026-86950: The Great Glyph Grift
An in-the-wild iOS bug with a possible WhatsApp zero-click path
Blog: https://calif.io/research/the-great-glyph-grift
PoC: https://github.com/califio/publications/tree/main/MADBugs/CVE-2026-86950