Public Report: Android Quick Share Application Penetration Test
NetSPI conducted a penetration test of Android Quick Share to assess the security of its new cross-platform sharing compatibility. NetSPI reviewed the implementation for vulnerabilities and data leakage both in transit and in on-device storage. NetSPI performed testing of the file transfer, session validation, previous related vulnerabilities, data storage, and other attack vectors. The penetration test discovered just one low-severity issue, which was remediated prior to launch. With this remediation, the engagement found that Quick Share’s new cross-platform sharing capability does not introduce any new security or privacy risks to Android or iOS users.
A full report is available for viewing here.
Explore More Blog Posts
PHP2Shell Unauthenticated RCE on PHP: CVE-2026-109618 & CVE-2026-109619
The PHP project has disclosed two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, affecting all PHP installations that serve web requests. Both vulnerabilities carry a CVSS 4.0 score of 9.2 (Critical).
Introducing the NetSPI Platform MCP
Discover how the new NetSPI Platform Model Context Protocol (MCP) integration gives you a live view of vulnerabilities in your environment and the speed of remediation needed to counter fast-paced attackers.
Administrating the Administrator, An OCI Identity Domains Permission Bypass
Discover how a permission bypass in Oracle Cloud Infrastructure (OCI) identity domains allowed lower-level administrator roles to create API keys for Identity Domain Administrators, leading to an unauthenticated privilege escalation path.