The Phone Was Still Ringing. WeChat Had Already Lost the Account.
Researchers built a wormable WeChat account takeover that required no answer or tap. Tencent says the path is fixed and there is no evidence attackers used it.
Android Security
Android 17 Encrypts the Domain Name. Enterprise Network Visibility Just Changed.
Android 17 adds ECH, local-network permission enforcement, certificate transparency by default and carrier-controlled 2G disablement. Privacy improves, but enterprise visibility changes.