Cutting through the Weekly Mobile Security Noise: Privacy threats

This weekly security briefing highlights several active security issues: Superfish adware preloaded on some systems uses a shared root certificate with an embedded private key, posing TLS interception risks; nation-state actors (U.S. and U.K. intelligence) reportedly stole SIM-card encryption keys from Gemalto, enabling widespread mobile interception across many carriers; a stealthy Android malware tricks rooted phones into appearing powered off while performing surveillance; and Google pushed Chrome updates to warn users about unwanted or malicious software and risky downloads.