Android Spyware Asin Targets Arabic Journalists Through Fake Conflict Apps
ESET has identified Android spyware called Asin spreading through fake news, PDF, and war map apps targeting Arabic-speaking users since early 2025.
Threats
Cisco's Unified CM Has a File-Write Flaw and Public Exploit Code
CVE-2026-20230 lets unauthenticated attackers write files and escalate to root. A public PoC exists and the version 15 patch isn't due until September.