Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Bright Data iOS SDK teardown reveals unauthenticated scraping relay and VPN bypass

Technical Analysis
First reported
Last updated
Happening score
H score 45
1 unique sources, 1 articles

Summary

Hide ▲

Researchers reverse-engineered Bright Data's iOS SDK and found it can turn consumer devices into exit nodes for web-scraping traffic. The teardown showed the job channel has no real authentication and that iOS traffic bypasses a configured VPN, increasing exposure on home and managed devices. The SDK's behavior also reduces visibility for normal app-monitoring tools.

Related Happenings

Google rolls out Android Intrusion Logging in Android Advanced Protection Mode

Security Tool/Service
H score10 First: 14.05.2026 16:30 Last: 14.05.2026 16:30 Sources 1

About this happening: Google has released Android Intrusion Logging for Android Advanced Protection Mode, giving high-risk Android users encrypted forensic logs to investigate suspected s...

Open Happening

Android Intrusion Logging forensic logging rollout for spyware investigations

Security Tool/Service
H score11 First: 13.05.2026 09:55 Last: 13.05.2026 09:55 Sources 1

About this happening: Android is adding Intrusion Logging, an opt-in forensic feature in Advanced Protection Mode that preserves device and network activity for suspected spyware compromise...

Open Happening

Android 17 expands platform security and privacy protections

Security Tool/Service
H score15 First: 12.05.2026 20:00 Last: 12.05.2026 20:00 Sources 1

About this happening: Android 17 will add a broad set of Google-backed security and privacy controls next month, reducing exposure to banking scam calls, device theft, and OTP theft...

Open Happening

Apple and Google Messages beta rollout of cross-platform E2EE RCS

Security Tool/Service
H score11 First: 12.05.2026 16:00 Last: 12.05.2026 16:00 Sources 1

About this happening: Apple and Google have begun a beta rollout of end-to-end encrypted RCS between iPhone and Android devices, materially reducing carrier and in-transit visibility fo...

Open Happening

SparkCat malware variant in App Store and Google Play apps steals wallet recovery phrases

Malware Activity
H score29 First: 03.04.2026 12:10 Last: 03.04.2026 12:10 Sources 1

About this happening: The SparkCat malware resurfaced in a new variant inside apps on the Apple App Store and Google Play Store, increasing the risk of mobile crypto wallet theft. The malwa...

Open Happening

Timeline

  1. 06.06.2026 11:29 2 articles · 1mo ago

    Initial report: Bright Data iOS SDK teardown reveals unauthenticated scraping relay and VPN bypass

    Initial Disclosure

    Researchers dissected the Bright Data iOS SDK and found it can relay scraping jobs through consumer devices while evading a configured VPN on iOS. The teardown also exposed a weak peer channel and practical domain indicators for blocking the relay.

    Show sources
    Open in new tab