First-Ever 1

Cybersecuritynews •Guru Baran • July 8, 2026

A full-chain exploit dubbed “IonStack” demonstrates how a single malicious URL click can hand attackers complete control over an Android device. The proof-of-concept by Nebula Security, described as the world’s first public Android 17 root demo, chains two zero-day vulnerabilities spanning Firefox and the Linux kernel to achieve remote code execution and privilege escalation without […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

IonStack Exploit Enables Full Control of Android 17 Devices via Malicious URL Nebula Security has disclosed a full-chain exploit named 'IonStack' that allows attackers to gain root access on Android 17 devices through a single click on a malicious URL. This exploit chains two zero-day vulnerabilities affecting Firefox and the Linux kernel, facilitating remote code execution and privilege escalation. The attack method raises significant concerns regarding the browser-to-kernel attack surfaces in mobile ecosystems. Currently, there are no patches available, and the exploit is considered a critical threat due to its potential for widespread impact. Security professionals are advised to monitor for any updates regarding mitigations or patches. The exploit's complexity highlights the evolving nature of mobile threats and the need for enhanced security measures. 7 sources 66

Extracted Entities

First-Ever 1

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (2)

Platforms (3)

Tools (1)