‘SMS of Death’ flaw cuts off Android calls without user interaction

A malformed text message can silently crash Android’s telephony service and disconnect calls, including emergency calls. Repeated delivery can leave affected phones unable to maintain cellular service even after restarting. Independent researcher Mark Blaszczyk published the findings on October 29, nearly six months after reporting the issue to Google. His disclosure says Google ultimately classified … The post ‘SMS…

Mobile Development
Read the full article at CyberInsider Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
CyberInsider

Steam flaws enabled zero-click code execution between logged-in PCs

Valve’s Steam platform was susceptible to zero-click remote code execution between computers signed into the same account. The findings were detailed by Atredis Partners researcher Bryan Alexander in an October 28 report, following a partial presentation at BSides PDX 2026. The team released proof-of-concept code and reported all the issues through Valve’s HackerOne program. Atredis … The post Steam flaws enabled zer…

CyberInsider

iRhythm’s June data breach has impacted over 8.18 million people

Cardiac monitoring company iRhythm suffered a data breach affecting 8,179,772 people, according to a federal filing that puts the incident’s impact far above the hundreds of thousands identified in earlier reporting. The US Department of Health and Human Services’ Office for Civil Rights (HHS OCR) now lists 8,179,772 affected individuals. Earlier coverage, based on state … The post iRhythm’s June data breach has impa…

The Hacker News

Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls

A flaw in Telegram for Android allowed an attacker to run code on a victim's phone via a voice call once the victim answered, according to security startup NebuSec. The attacker needed only an ordinary Telegram account. Telegram fixed the flaw in version 12.10.4 of the app, released in late September, and NebuSec disclosed it on October 29. The flaw can be triggered in every version from