Amnesty International found a zero-day exploit sold by digital intelligence firm Cellebrite used to hack a Serbian student critic of the government. The human rights body had accused Serbia in December of using spyware routinely for wider state control and against civil societies, which led Cellebrite suspending sales to Serbian clients. Amnesty discovered the new case involving a lock screen attack chain for fully patched Android devices, calling it continued evidence of Serbia’s surveillance campaign.

Nearly 1.6 million Android TV devices have been infected by Vo1d malware
A new variant of the Vo1d botnet has been infecting Android TV devices globally, peaking at nearly 1.6 million devices in 200+ countries on January