[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Cybersecurity News · markdown

confirmed research (Bitdefender Labs, Nov 5); Google assessed outside security-update scope; no in-the-wild boot-loop exploitation reported

Bitdefender GhostMap: a malformed APK can put Android 10+ into a persistent boot loop — install is enough, no permissions or code needed

  • Risk scenarios Bitdefender outlines (hypothetical): disable a phone as extortion leverage; malform an app's own icon so Settings/launcher crash before uninstall; crash scanners that parse the APK.
  • Defense today: prefer sideload caution; Bitdefender Mobile Security flags the malformation as Android.Riskware.Ghostmap.A — act on the warning before install finishes.
  • No CVE assigned in the public write-up; Google has not published a security bulletin entry.

Sources: Bitdefender Labs: GhostMap — The Android flaw that crashes your phone before you open the app (Nov 5) · BleepingComputer summary