Researchers have identified a new spyware toolkit called ZeroDayRAT that allows complete remote access to both iOS and Android devices. Available on Telegram, it enables features like live camera feeds, keylogging, and theft of banking information. Infection occurs through malicious binaries, and attackers can use various distribution methods, including phishing and social engineering.

This guide explains how to add Expo and React Native to an existing native application using the integrated approach. It covers prerequisites, project setup, and specific configurations for both Android and iOS platforms. You'll learn to create a React Native view within your native app without a complete rewrite.

A new malware named SparkKitty has been discovered, targeting iOS and Android devices to steal sensitive images from users' photo galleries, particularly those containing cryptocurrency wallet seed phrases. It has been distributed through official app stores and malicious sites, showcasing advanced techniques to exploit app provisioning systems.

The react-native-screens project provides native navigation container components for React Native, intended as a dependency for full-featured navigation libraries rather than a standalone library. It supports multiple platforms including iOS, Android, and Windows, and includes specific integration guidelines and code snippets for handling common issues and configurations.

A recent study highlights significant data leaks associated with popular free VPN apps available on iOS and Android. Despite their claims of privacy protection, many of these applications have been found to expose sensitive user data, raising concerns about their reliability and the true safety they offer to users.

Expo SDK 54 beta has been released, allowing developers to test new features and improvements, including React Native 0.81 and React 19.1.0. Significant enhancements include precompiled XCFrameworks for iOS, support for Liquid Glass icons, and changes to dependency handling for React Native modules. Additionally, the beta introduces updates to the Expo UI and modifications to build processes for Android applications.

Researchers have discovered that the defenses implemented by Apple and Google against "juice jacking," a method of data theft via malicious chargers, can be easily bypassed. Their new attack, termed ChoiceJacking, exploits vulnerabilities in the USB protocol, allowing attackers to gain unauthorized access to sensitive data on mobile devices. Despite recent updates from both companies, many Android devices remain at risk due to fragmentation and incomplete implementations of security measures.

QA Wolf offers automated quality assurance testing solutions for various platforms, including iOS and Android, with features like flake-free testing, performance assessments, and accessibility checks. The service is designed to enhance productivity and streamline the testing process for businesses across multiple industries, including fintech and eCommerce. Additionally, QA Wolf provides resources and community support for QA professionals.