Researchers uncover unknown Android flaws used to hack into a student’s phone

Amnesty International uncovered a chain of three zero-day vulnerabilities in the Linux USB kernel used by Cellebrite forensic tools to unlock Android phones; Google patched the issues after Amnesty shared its findings. Amnesty's forensic analysis linked the exploitation to Serbian authorities who used Cellebrite to unlock activists' and a journalist's phones and to install the NoviSpy Android spyware, prompting Cellebrite to suspend the relevant Serbian customer.