Positive Technologies Reports 11 Flaws in Apple and Android Products

Russian cybersecurity firm Positive Technologies says it found 11 security flaws affecting Apple and Android products. The company, which is under US sanctions, gave its findings to Russian state news agency TASS, according to TechRadar.

Nine flaws affected Apple devices and software, and two affected Android, including Pixel phones. The Android flaws were reportedly rated high severity. One could let an attacker use a crafted NFC tag to fetch, set up and run an app without the owner’s approval. The other could let an app already on a device change network settings, join a chosen Wi-Fi network, add a certificate or adjust proxy settings without extra permissions or owner confirmation.

Google fixed both Android flaws in its September 2026 patches. Positive Technologies said the NFC flaw could be triggered by bringing a phone near the tag. The source report did not identify vulnerable Android versions or Pixel models, leaving the number of affected devices unknown.

According to TASS, the Apple findings included flaws involving access rights, privacy and data protection. One macOS flaw could give a hostile app the highest level of control over a computer; another could expose protected information. Access keys could also be deleted without user approval. A kernel flaw could cause device failure or corrupt data in memory.

Apple has released patches, but the source report did not specify which operating system versions include them. Devices that have not received the relevant updates may remain exposed to the reported flaws.