CISA warns of Android bug exploited by Chinese app to spy on users

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned today of a high-severity Android vulnerability believed to have been exploited by a Chinese e-commerce app Pinduoduo as a zero-day to spy on its users. [...]

agency android android vulnerability app bug chinese cisa commerce cybersecurity e-commerce exploited high infrastructure infrastructure security pinduoduo security severity spy vulnerability zero-day