Hackers exploited iOS and Android flaws to infect phones

Ars Technica security feed covering active exploitation, critical vulnerabilities, supply-chain compromises, botnets, firmware and mobile threats, major data breaches, cryptographic trust failures, ransomware or malware operations, and large-scale cybercrime. Notable reports include suspected state-sponsored iOS and Android exploitation, a $6.3 billion Binance theft, a 1.3 million-device Android TV botnet, UEFI bootkits and EDK2 flaws, a backdoored verified code extension, compromised TLS certificates, PHP remote-code-execution activity, Tor exit-node hijacking, and exploitation of Plex and Io