Public Report: Android Quick Share Application Penetration Test
NetSPI conducted a penetration test of Android Quick Share to assess the security of its new cross-platform sharing compatibility. NetSPI reviewed the implementation for vulnerabilities and data leakage both in transit and in on-device storage. NetSPI performed testing of the file transfer, session validation, previous related vulnerabilities, data storage, and other attack vectors. The penetration test discovered just one low-severity issue, which was remediated prior to launch. With this remediation, the engagement found that Quick Share’s new cross-platform sharing capability does not introduce any new security or privacy risks to Android or iOS users.
A full report is available for viewing here.
Explore More Blog Posts
CVE-2026-78902: XSS to RCE in pfSense with one DNS request
Discover how a single DNS request can chain a stored Cross-Site Scripting (XSS) vulnerability into Remote Code Execution (RCE) on pfSense firewalls. Read the full technical breakdown of CVE-2026-78902 affecting the popular pfBlockerNG package.
“StyleSmuggler” – Adobe Commerce, Adobe Commerce B2B, and Magento RCE (CVE-2026-75650): Overview and Takeaways
Adobe disclosed CVE-2026-7565, dubbed “StyleSmuggler,” on September 7th, 2026. The vulnerability, which received a maximal initial CVSS score of 10.0, affects Adobe Commerce, Adobe Commerce B2B, and Magento Open Source. The flaw allows an unauthenticated network-based attacker to execute arbitrary code by injecting PHP through Magento's email template engine.
Modern Adventures in Azure Privilege Escalation
Azure has been growing rapidly over the past few years As of June 2026, there were over 200 services, 897 built-in Azure RBAC roles, and 22,018 different permissions. The attack surface of Azure has also increased with this growth. There are also a number of new and updated tools that give us insight into the […]