mobile device management

Johnson Controls has issued a security fix for XAAP Android, addressing a local data exposure weakness that could allow sensitive application information to be read in plaintext from an affected device. The issue, tracked as CVE-2026-34490, affects XAAP Android versions earlier than 1.53 and has...

January 19, 2026 is no longer a planning date for Intune iOS app protection. Organizations that still have managed iOS apps below Microsoft’s supported baseline can face launch blocks rather than warnings, and the right response depends first on who owns the affected app: App Store-delivered...

Google fixed CVE-2026-13913 in Chrome for iOS 150.0.7871.47, closing a Medium-severity Autofill policy flaw that could let a remote attacker leak data across web-origin boundaries after persuading a user to perform specific interface gestures on a crafted HTML page. The vulnerability is not...

Google’s CVE-2026-14401 is a high-severity ANGLE input-validation flaw affecting Chrome on Android before version 150.0.7871.46. According to the Chrome-originated CVE description, a remote attacker who has already compromised the browser’s renderer can use a crafted HTML page to potentially...

Apple released iOS 27 developer beta 2 on June 22, 2026, adding a more visible Write with Siri control above the keyboard, improved RCS replies with Android users, early Wallet Insights work, Home app fixes, and signs of new iCloud backup alerts. The beta is not just a bag of interface tweaks...

Microsoft announced on May 5, 2026 that Copilot Cowork now runs inside the Microsoft 365 Copilot app on iOS and Android, while continuing to operate in the cloud so delegated work can keep moving after a user leaves the desktop. The practical move for IT teams is not to treat this as “Copilot...