uShield
Cyber Security
QR code phishing rose 146% in the first quarter of 2026, and the reason is structural: a QR code hands the attack to a phone, where the mail gateway, the proxy, and the endpoint agent all stop watching. Now an eighth of them are not images at all.
Read More
Password managers remain the single best upgrade most people can make — and they have quietly become the most valuable thing on the endpoint. Infostealers, not vault cryptography, are the problem.
Read MoreA hardened Android distribution. It uses hardware memory tagging (MTE) on Pixel 8, 9 and 10 devices—Google disabled it in Pixel 11 firmware—and 'Sandboxed Play Services', so essential apps run without Google getting privileged access to the operating system.
An extreme level of security for high-risk individuals. It strictly limits web technologies, blocks most message attachments, and disables complex features that are historically targeted by 'zero-click' spyware like Pegasus.
The main repository for free and open-source Android apps. It verifies reproducible builds where an upstream project supports them, shows a reproducibility status on each app page, and flags anti-features such as tracking in its listings.
More than a browser; on Android, its 'App Tracking Protection' creates a local VPN tunnel that intercepts and blocks data-hungry trackers from other apps installed on your phone. It is not available on iOS.
On-device scam detection for calls and messages. During calls, Gemini Nano and smaller on-device models analyse conversational patterns and alert the user with audio and haptic warnings; Scam Detection in Google Messages flags suspicious SMS, MMS and RCS conversations. Call detection began as a US-English beta on Pixel 9+ devices.
Features 'App Anomaly Detection' which uses behavioral analysis to spot malicious activity in real-time, even for 'Zero-Day' malware that hasn't been added to signature databases yet.
The standards-based successor to passwords, supported by Apple, Google and third-party password managers. Each credential is bound to the site's origin and the private key stays on the device, so a lookalike login page cannot capture or replay it.
The definitive technical documentation for iOS security. In 2026, it includes deep dives into 'Private Cloud Compute'—Apple's stateless system for processing cloud AI requests privately.
Android's monthly security bulletin, listing platform, upstream Linux kernel and chipset-vendor fixes with severity ratings and patch levels. Monthly bulletins are published for AOSP; which fixes reach a phone depends on the manufacturer and model.
Apple's anti-theft control for iPhone, available from iOS 17.3. Away from a familiar location, viewing saved passwords and passkeys or changing the Apple Account password requires Face ID or Touch ID with no passcode fallback, and critical changes wait an hour plus a second biometric check.
Amnesty International's open-source command-line tool for scanning iPhone and Android backups and file systems for indicators of commercial spyware such as Pegasus. It is aimed at journalists, activists and investigators, and its own licence limits use to consensual forensic analysis.