Qualcomm Zero-Day Exploited in Targeted Android Attacks

DarkReading reports active exploitation of a Qualcomm zero-day tracked as CVE-2026-21385 — a high-severity memory-corruption flaw in Qualcomm components on Android devices. The activity is observed in targeted attacks and may be linked to commercial spyware or nation-state actors; successful exploitation could allow device compromise (e.g., code execution or data access). Organizations should prioritize vendor patches/updates, monitor affected endpoints for indicators of compromise, and apply compensating controls where patches are not yet available.