Android security advisory – October 2026 monthly rollup (AV26-1003)

Social Media When Elections Are Close: Doing the Impossible Better

Everyone knows, or should, that perfect (balanced, targeted, transparent, swift and swiftly appealable) content moderation at scale is impossible. That doesn’t mean powerful social platforms don’t have to try to get at least reasonably close, especially when access to good information can have a profound effect on political participation and speech. That’s why so many people, including the Meta Oversight Board, criti…

اپل یک واترمارک مخفی به تصاویر ویرایش‌شده با هوش مصنوعی آیفون اضافه کرد

تصاویر ساخته‌شده یا ویرایش‌شده با هوش مصنوعی اپل در به‌روزرسانی iOS 27.2 به واترمارک نامرئی SynthID مجهز شدند.

AL26-026 - Critical vulnerabilities impacting PHP - CVE-2026-109618 and CVE-2026-109619 - Update 2

Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens

Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, and collect sign-in tokens for a victim's work account. Microsoft tracks the flaw as CVE-2026-80097 and fixed it in Authenticator for Android version 6.2606.4246, so anyone using the app should update. In the researchers' tests,