Samsung Galaxy S26 zero-day exploitation security flaw
Vulnerability
Summary
Hide ▲
Show ▼
Researchers twice compromised the Samsung Galaxy S26 on the first day of Pwn2Own Ireland 2026, showing active zero-day exposure on a flagship mobile target. The opening-day demos were part of a broader tally of 32 zero-days exploited in the contest. The competition gives vendors 90 days to ship updates before public disclosure.
Related Happenings
ToxicPanda 2.0 Android malware expands fraud capabilities
Malware Activity
H score29
First: 20.08.2026 13:38
Last: 20.08.2026 13:38
Sources 1
About this happening:
The ToxicPanda (aka TgToxic) Android malware family now ships with 167 remote commands and broader fraud features that raise the risk of credential theft and account takeo...
ToxicPanda 2.0 Android malware expands fraud capabilities
Malware ActivityAbout this happening: The ToxicPanda (aka TgToxic) Android malware family now ships with 167 remote commands and broader fraud features that raise the risk of credential theft and account takeo...
Manic Android malware activity with offline relay exfiltration
Malware Activity
H score29
First: 20.08.2026 13:02
Last: 20.08.2026 13:02
Sources 1
About this happening:
Manic is an Android malware activity that targets Ukrainian banks, government and identity services, messaging apps, and also Russian and European financial inst...
Manic Android malware activity with offline relay exfiltration
Malware ActivityAbout this happening: Manic is an Android malware activity that targets Ukrainian banks, government and identity services, messaging apps, and also Russian and European financial inst...
Samsung Members/Samsung Account/Bixby app-handoff chain (multiple vulnerabilities)
Vulnerability
H score28
First: 05.08.2026 22:40
Last: 05.08.2026 22:40
Sources 1
About this happening:
A Samsung Members and Samsung Account app-handoff vulnerability chain involving CVE-2025-21079, CVE-2025-58486, and CVE-2025-58487 enabled remote system-leve...
Samsung Members/Samsung Account/Bixby app-handoff chain (multiple vulnerabilities)
VulnerabilityAbout this happening: A Samsung Members and Samsung Account app-handoff vulnerability chain involving CVE-2025-21079, CVE-2025-58486, and CVE-2025-58487 enabled remote system-leve...
Android Framework code execution and privilege escalation flaw (CVE-2025-48595)
Vulnerability
H score40
First: 02.06.2026 14:10
Last: 02.06.2026 14:10
Sources 1
About this happening:
Google's June 2026 Android security patches now cover CVE-2025-48595, an actively exploited Android Framework flaw that can lead to code execution and privilege...
Android Framework code execution and privilege escalation flaw (CVE-2025-48595)
VulnerabilityAbout this happening: Google's June 2026 Android security patches now cover CVE-2025-48595, an actively exploited Android Framework flaw that can lead to code execution and privilege...
Premium Deception Android malware campaign
Campaign
H score38
First: 20.05.2026 18:30
Last: 20.05.2026 18:30
Sources 1
About this happening:
The Premium Deception campaign used nearly 250 fake Android apps to enroll victims in premium mobile billing subscriptions, creating direct fraud risk across multiple coun...
Premium Deception Android malware campaign
CampaignAbout this happening: The Premium Deception campaign used nearly 250 fake Android apps to enroll victims in premium mobile billing subscriptions, creating direct fraud risk across multiple coun...
Timeline
-
06.10.2026 22:21 2 articles · 2h ago
Samsung Galaxy S26 zero-day exploitation security flaw
Initial DisclosureOn day 1 of Pwn2Own Ireland 2026, researchers showed a working zero-day compromise against the Samsung Galaxy S26. The handset was hacked twice during the opening session.
Show sources
- Hackers exploit 32 zero-days on first day of Pwn2Own Ireland — www.bleepingcomputer.com — 06.10.2026 22:21
- Hackers exploit 32 zero-days on first day of Pwn2Own Ireland — www.bleepingcomputer.com — 06.10.2026 22:21