CISA acknowledges known exploitation of Samsung Mobile vulnerability

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Adds Samsung Mobile Vulnerability CVE-2025-21042 to Exploited Catalog The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Samsung mobile devices vulnerability, tracked as CVE-2025-21042, to its Known Exploited Vulnerabilities catalog. This flaw, which has a CVSS score of 8.8, was exploited as a zero-day and affects Samsung Galaxy devices. The addition to the catalog follows recent research detailing the LANDFALL exploit. 2 sources 35