Anthropic disclosed that between December 2025 and August 2026 it detected and disrupted misuse of its Claude AI models by multiple threat actors, including groups tied to ShinyHunters. One French-speaking member, 'frkoo', ran automated pipelines on AWS servers that downloaded 1.8 million Android APKs, decompiled them, and scanned for hardcoded credentials using TruffleHog, funneling verified findings into a categorized Telegram network. The same actor also harvested GitHub organization emails to obtain access tokens and ran a carding site impersonating French police to sell stolen payment data.
Apple's event introduced a feature called Reference Image, which creates an unalterable digital record of a photo so users can check whether it's been altered with AI, alongside an AppleCare One Family plan and a new foldable device called iPhone Duo. The writer, a longtime Android user, says these announcements impressed them despite Android often introducing similar concepts first.
A free application designed to identify and flag suspicious phone calls and messages is being highlighted as a defense against increasingly sophisticated scams. The tool works across both major mobile platforms, giving users a way to screen for fraud attempts before falling victim to them.
Android now lets users move saved passwords and passkeys directly between password managers through a built-in OS process, without exporting unencrypted files. The system automatically detects compatible managers installed on the device and lets users review data before approving the transfer. Google confirmed support for Google Password Manager, 1Password, Bitwarden, and Dashlane, with more apps expected to add compatibility.
Group-IB researchers found that the Chinese-speaking threat group GoldFactory has been abusing Google's Work Profile feature to clone victims' banking apps into isolated, hidden environments where fraud-detection tools can't reach. The campaign, powered by the Gigabud Android Trojan and a cloning tool called Vwork, compromised roughly 1,469 devices and 1,281 logins in Indonesia between February and July, causing nearly $1 million in losses.
Google is rolling out a built-in Android feature that lets users securely transfer both passwords and passkeys directly between credential manager apps, replacing the old method of exporting unencrypted text files or manually recreating passkeys. At launch, the tool supports Google Password Manager, 1Password, Bitwarden, and Dashlane, with other providers able to add support via Android's Credentials Transfer API. Users initiate the process from their new password manager, and Android handles detection, review, and authorization before completing the transfer in seconds.
Google has enabled a new on-device transfer system letting Android users move saved logins between password managers without manually re-entering them. The feature works through an import option within supported apps, currently including Google Password Manager, 1Password, Bitwarden, and Dashlane, provided both apps are installed and synced with credentials.
Security firm Zimperium has identified a new Android malware called Mantax Otax that combines file encryption with data theft, distributed via malicious APKs outside Google Play through phishing lures aimed at Indonesian users. Once installed, it abuses Accessibility permissions to harvest device data, report to a GitHub-hosted command server, and on older Android versions (9 and below) encrypts files, replaces images with ransom notes, and opens a Firebase-hosted chat to negotiate payment. Researchers exploited a misconfigured Firebase server to expose the attackers' actual conversations with victims.
Google rolled out a new Android feature that lets users transfer passwords and passkeys directly between password manager apps without exporting CSV files. The system works by having the new app request an import from the old one, with Android coordinating the transfer so users can review and approve the data before it moves. The feature currently supports Google's own password manager along with Bitwarden, 1Password, and Dashlane, and works on devices running Android 8 or later.
Users across iOS, Android, and web are reporting that YouTube and YouTube Music apps hang or fail to load content, with some unable to play older videos or seeing blank home pages. The issue reportedly persists even after reinstalling apps and clearing cache, and some users say they've experienced it for months. Google has not yet acknowledged the problem publicly.
Volvo has updated the interior of its XC40 and EX40 models with a bigger 11.2-inch touchscreen, up from 9 inches, mounted atop the dashboard rather than recessed into it. The updated software runs the latest Android Automotive build with Google's Gemini assistant, which can adjust vehicle settings, suggest restaurants with dietary details, and recommend scenic routes.
Trump Mobile quietly updated its website to raise the price of the T1 Phone from its original $499 to $749, without issuing any public statement about the change. The device itself remains unchanged, still shipping with 512GB of storage, 12GB of RAM, and Android 15, which has received just one security update since launch.
GoKawiil