Friday, 7 November, 2025
Zero-Day Flaw Enables Landfall Spyware on Samsung Galaxy
Commercial-grade Landfall spyware is exploiting a zero-day vulnerability (CVE-2025-21042/3) within Samsung Android's image processing library. The attack chain, discovered by security researchers, allows remote code execution on vulnerable Samsung Galaxy devices, including those running Android 13 and later. The spyware is reportedly delivered via malicious digital image files (DNG).
Read full story at TechCrunch