Public reporting does not confirm a mass campaign, Google Play distribution, or specific targeting in the United States. This article covers what researchers found, which choices allow the attack to progress, and what you can check without treating every unusual phone problem as evidence of RatHat.

What is RatHat Android malware?

RatHat is the name Zimperium’s zLabs team gave to Android malware found in samples distributed through fake messages, malicious ads, and deceptive download pages. Zimperium published its technical analysis of RatHat on September 16, 2026.

Researchers found tools that imitate app screens, monitor activity, and intercept codes from text messages or notifications. RatHat also tries to keep components running after the main app is removed. Zimperium observed that behavior in the samples it studied. The report does not establish that every infection follows the same sequence or that the malware has reached a large number of people.

AI helps the malware locate screen elements and choose where to tap. It does not install the file on its own. The chain begins when someone downloads an APK outside the official store and approves access that deserves closer attention.

How does RatHat reach a phone?

The route described by Zimperium starts with social engineering. A text, ad, or webpage pretends to come from a familiar source and offers an APK file. One sample posed as a streaming service and could change its name and icon.

An APK is the file format Android uses to install apps. A file from outside the official store is not automatically malicious. Risk rises when you cannot confirm its source, the download arrives unexpectedly, or the app requests controls that make no sense for its stated purpose.

Before installing, check the developer, the web address, and the reason the app is unavailable in the store. If the offer came through a message or ad, find the service through a known route instead of the supplied link. Google Play Protect can also scan apps from other sources, though no security tool can promise perfect detection.

Three permissions help the attack progress

The RatHat chain combines three decisions that appear on the Android screen.

1. The user installs an APK obtained outside the store. The file opens the initial path and tries to look legitimate.
2. The app requests Accessibility access. Android provides this feature to help people use their devices, but malicious software can abuse it to read the screen and perform taps.
3. The malware tries to enable Developer options and Wireless Debugging. It then uses ADB to gain control beyond the permissions normally available to an app.

ADB stands for Android Debug Bridge. Developers and repair technicians use it to test devices and run commands. Wireless Debugging provides that connection without a cable. Most users should leave it off when they do not need it.

RatHat uses Accessibility to move through settings, capture a pairing code, and create a local ADB connection. Its AI-assisted automation helps it find buttons and text across different interfaces. This makes the process more adaptable, but the earlier install and permissions still matter.

Related: Review which apps can access sensitive Android features

Is RatHat targeting people in the US?

As of September 22, 2026, public sources did not confirm a campaign focused on the United States, a victim count, or affected US banks. Zimperium describes global financial targeting in the samples but does not provide a country list.

That gap matters when reading headlines. RatHat documents a possible attack technique. It does not give us grounds to label every unknown APK or slow phone as a RatHat infection. The checks below still help because they reduce common risks from malicious Android apps.

Which signs deserve a closer look?

One symptom cannot identify RatHat. Look for the surrounding context, such as a recent install from an unknown source and permissions you do not remember approving.

• An unfamiliar app appears among enabled Accessibility services.
• Developer options or Wireless Debugging are on without a known reason.
• A sideloaded app changed its name, disappeared from the launcher, or resists removal.
• An overlay appears over a banking app or asks for a PIN or authentication code.
• You notice account access or transactions you do not recognize.

Android lets you review permissions for installed apps. Menu names vary by phone maker and Android version. Keep legitimate Accessibility tools enabled when you recognize and use them, including screen readers and password managers.

What should you do after installing a suspicious APK?

If you only received the link, delete the message and do not install the file. If you installed the app, consider disconnecting the phone from mobile data and Wi-Fi, provided that doing so will not block an essential safety action. Use another trusted device to review sensitive accounts.

Check Accessibility, device administrator apps, and Wireless Debugging. Remove access you do not recognize. A security scan may help identify suspicious files and apps, but it does not replace reviewing affected accounts and settings.

Treat bank credentials as exposed if you entered a password, PIN, or one-time code. Use the institution’s verified app, website, help center, or official support channel from a trusted device, then review recent activity. IdentityTheft.gov provides a recovery plan for identity-related misuse.

Zimperium found a component that could remain active after the main app was uninstalled. Removing the icon may therefore be insufficient when persistent ADB access exists. Use the phone maker’s official support channel if you find concrete signs of that access. A factory reset may form part of recovery, but it requires preparation and should not follow from a vague suspicion alone.

Lower the risk before the next download

Keep Android and your apps updated. Leave Wireless Debugging off when you do not use it, and read Accessibility requests before approving them. A video player, promotion, or routine update rarely needs to control the whole interface.

Avoid using a suspicious page to prove its own legitimacy. When a message says you need a new app, open the service’s known website or official store listing yourself. That short pause often stops the chain before an unknown file reaches the phone.

Keep reading

• How to Check If a Link Is Safe: How dfndr Scans Suspicious URLs
• Android Security Update: Check the August Patch
• Is Your Phone Acting Strange? Here’s Why the SIM Card Is Not Always the Cause
• Why Updating Android Helps Protect Your Phone, Even When Nothing Looks Different

O post RatHat Android malware: how AI and permissions are used apareceu primeiro em PSafe Blog.

If you use an iPhone in the United States, check those details before you troubleshoot or change settings. This guide covers the main Siri AI requirements, the devices Apple lists as compatible, and the app controls you may want to review before giving the assistant access to personal context.

What are the Siri AI requirements?

Siri AI needs Apple Intelligence-capable hardware, version 27 of the relevant operating system, and supported language settings. Access can still vary by region, account, and feature while the beta rolls out.

Apple Intelligence and Siri AI are related, but the names do not describe the same thing. Apple Intelligence includes a broader group of writing, image, and system features. Siri AI is the updated assistant experience, including personal context, awareness of content on the screen, and actions that can cross between apps. A joint statement from Google and Apple said Gemini models would help power future Apple Intelligence features, including a more personalized Siri.

That distinction explains why some users see Apple Intelligence options without receiving every Siri AI feature. Apple may also release one capability before another, even on two devices that appear to have the same setup.

Which devices support Siri AI?

Apple’s current requirements start with hardware that can run the new generation of Apple Intelligence.

Compatible hardware is only the first check. The device also needs the required system version and enough free storage for downloaded components. Some tasks may use Apple’s servers and can have daily limits.

Back up the device through Apple’s built-in tools before installing beta software. A beta can contain bugs, change behavior, or remove a feature while Apple works on it. If you rely on the phone for work or another essential task, waiting for a stable release may save you trouble.

Read next: Review which apps use your camera, microphone, and location.

Why is Siri AI not showing after the iOS 27 update?

Work through the setup in this order:

1. Confirm the exact iPhone model in Settings.
2. Check the installed iOS version.
3. Compare the device language with the Siri language.
4. Review the region on the Apple Account.
5. Check Apple’s support page for the current beta availability.

A missing option does not mean the update failed. Apple can release beta access in stages, and eligibility may differ by account or feature. A supported model may also need matching English settings during the current US rollout.

Changing the phone’s language can affect menus, search results, and voice responses. Do it only if you are comfortable using the whole device in that language. If you want to compare assistant experiences, Google explains how its Gemini app works on iPhone. It is a separate app with its own availability rules, not a switch that unlocks Siri AI. Avoid following a social post that promises instant access through an undocumented setting.

How Siri AI uses personal context

Apple says the updated assistant can find details across messages, email, photos, and other apps when a request needs personal context. It can also use information visible on the screen. The available data depends on the app, the permission, and the feature you are using.

Some processing takes place on the device. For larger requests, Apple says it can use Private Cloud Compute, which the company designed to limit access to user data. Treat that description as Apple’s documented privacy model, not as the result of an independent audit.

You can test Siri AI without opening every app to it. Review the apps allowed to appear in Search or Spotlight and the permissions for location, photos, camera, and microphone. Google’s Gemini Apps Privacy Hub provides a useful comparison of how another assistant describes activity, permissions, and connected apps. Those rules do not replace Apple’s settings. A navigation app has a clear reason to use your location. A basic puzzle game probably does not need access to your photo library.

How to limit Siri AI access to an app

Menu labels may shift during the beta. Look in the Siri, Search, Apple Intelligence, or individual app settings. Select an app and turn off its ability to show content or contribute context if that access does not fit how you use it.

Base the choice on the task. If you want Siri to find a travel confirmation in email, that app needs enough access to return the result. If you never ask the assistant about content from another app, you can remove that connection and see whether anything useful stops working.

Shared devices deserve another quick review. Check notification previews, lock-screen access, and the accounts signed into the phone. Personal context can make an assistant more useful, but ordinary privacy settings still decide what another person can see.

What to check before you turn it on

Confirm the hardware, OS version, English settings, region, and beta status. Make a backup, then review which apps can provide context. Start with one everyday request after Siri AI appears and check whether the answer matches what you expected.

You do not need to enable every option on day one. Add access when a feature solves a real problem, and remove it when the benefit is unclear. That approach gives you time to learn how the beta behaves without handing it more information than the task needs.

Continue reading

• What not to share with ChatGPT, Gemini, or any AI
• ChatGPT for teens: what changes for teens and parents
• What happens when you tap “Allow” on an Android app?

O post Siri AI requirements: supported devices, settings, and privacy controls apareceu primeiro em PSafe Blog.

For families, the useful question is not simply whether the new experience is “safer.” It is what happens automatically, what requires linked accounts, and what remains private. This guide separates those three categories, explains whether parents can read chats, and offers a practical way for families to decide how AI fits into schoolwork and everyday life.

What Is ChatGPT for Teens?

ChatGPT for Teens is an experience that OpenAI applies to eligible accounts belonging to users ages 13 to 17, based on a stated or estimated age. OpenAI says it adds under-18 safeguards and learning features without requiring a family to turn on a separate “kids’ mode.”

A global launch does not mean instant availability on every account. The OpenAI Help Center page for ChatGPT for Teens describes a gradual rollout. If the options are missing today, that alone does not mean the account is ineligible or configured incorrectly.

It also helps to separate product design from guaranteed results. OpenAI describes how the safeguards are intended to work, but ChatGPT can still produce incomplete or incorrect answers. A teen should verify important information with a teacher, trusted adult, or reliable primary source.

What Changes Automatically, and What Is Optional?

The built-in teen safeguards are applied when an account is recognized as belonging to a teen. Parental controls are different: they require an optional link between the teen’s account and a parent or guardian’s account.

In practice, the features fall into three groups. Age-appropriate safeguards, study tools, and reminders are part of the experience applied by the platform. Placement is based on the age a user states or the age OpenAI estimates for the account.

When accounts are linked, a parent or guardian can manage available options such as time and feature settings. OpenAI also describes limited notifications for specific safety situations. These choices do not appear merely because an account is classified as a teen account; they depend on family linking and configuration.

The third group is what is not shared by default. Linking accounts does not provide full conversation content, real-time chat monitoring, or general access to chat history. This distinction clears up a common misunderstanding: automatic protections are not the same as parental surveillance.

Read also: Why deleting an app is different from deleting an account

Can Parents Read a Teen’s ChatGPT Conversations?

No. OpenAI’s parental controls documentation says a parent or guardian cannot read a teen’s conversations or monitor chats in real time simply because the accounts are linked.

That does not mean the linked experience never communicates anything about safety. OpenAI describes limited notifications for specific circumstances, but those are not the same as opening the full conversation history. Families should review the current wording in their own settings because controls and interface labels can change as the rollout continues.

A healthier family conversation can focus on how the tool was used instead of demanding permanent access. A teen can choose to show a response when they want help checking it. A parent can ask which sources supported the answer and what the teen learned, preserving trust while still offering guidance.

How Does Age Prediction Affect an Account?

OpenAI uses a person’s stated age and may also use age prediction to identify accounts likely to belong to someone under 18. When that estimate is wrong, the company provides an official age-verification path to correct it.

Two limits matter here. An age estimate is not certainty about who is using the device, and an inaccurate result should not be bypassed with false account information. The appropriate next step is the verification process available through the account or OpenAI’s official Help Center.

Explaining the reason for an age-based experience can also reduce frustration. Teens deserve to know which settings are changing and why, rather than encountering a restriction with no context.

How Can You Check Whether the Teen Experience Is Available?

Because the rollout is gradual, check the account and official documentation rather than relying on screenshots or instructions from an unfamiliar third party.

1. Confirm that the birth date associated with the account is accurate.
2. Review account settings for teen-experience or parental-control options available in the current interface.
3. If the family wants additional controls, follow OpenAI’s official account-linking flow.
4. If an age estimate is incorrect, use the official verification process.
5. If the features are not present, check the Help Center as availability expands.

Do not upload identity documents, private chats, or personal information through unofficial forms. The teen experience does not require a third-party extension or a separate unofficial app.

A Family Agreement Can Make AI More Useful

Settings can shape access, but they cannot decide whether a response supports learning or replaces it. A short family agreement can give teens room to explore while making expectations clear.

• Decide when AI helps: explaining a concept, generating practice questions, or comparing ways to solve a problem.
• Agree on how to verify answers using class materials, a teacher, or a reliable primary source.
• Keep passwords, documents, private identifiers, and other people’s personal details out of prompts.
• Set times that do not replace sleep, physical activity, or time with other people.
• Involve a trusted adult or teacher when an answer concerns health, safety, money, or a sensitive situation.

The goal is not a perfect set of controls. It is a shared understanding of what OpenAI applies automatically, what the family selected, and when a generated answer deserves a second look.

What Should Families Do Now?

Open the account settings together, check whether the teen experience is available, and agree on three basics: when to use it, how to verify answers, and when to ask a parent, guardian, or teacher for help. If the features have not arrived, follow the official documentation as the gradual rollout continues.

Keep Reading

• What Incognito mode does and does not keep private
• How to review devices signed in to a Google account
• How local photo deletion differs from cloud storage

Sources

• OpenAI — Introducing ChatGPT for Teens
• OpenAI Help Center — ChatGPT for Teens
• OpenAI Help Center — Parental controls in ChatGPT
• OpenAI — Our approach to age prediction

O post ChatGPT for Teens: What Changes for Teens and Parents apareceu primeiro em PSafe Blog.

This guide shows where to find that date, what the two August levels mean, and what to do when the update has not arrived. The goal is a practical check, not unnecessary alarm.

How to Check Your Android Security Update

On most devices, open Settings > About phone or About tablet > Android version. Look for Android security update or Android security patch level. Menu labels vary by manufacturer, so you can also search Settings for “security update” or “software update.”

Google’s official Android Help instructions explain the standard path, but Samsung, Motorola, Pixel, and other devices may organize these controls differently.

Use this three-step check:

1. Note the date shown for the Android security update.
2. Return to the software or system update screen and check for an available package.
3. Check the separate Google Play system update date as well.

If an official update is waiting, use a reliable connection, make sure the battery has enough charge, and follow the on-screen directions. A current backup is a sensible precaution before a major system change.

What the 2026-08-01 and 2026-08-05 Levels Mean

The official August 2026 Android Security Bulletin organizes fixes under two patch levels. The 2026-08-01 level covers the set assigned to the first part of the bulletin. The 2026-08-05 level includes all issues published for the month, including fixes tied to additional components.

This structure gives manufacturers flexibility as they integrate fixes. For a phone owner, the practical takeaway is that a security patch level of August 5, 2026, or later covers all issues listed in that monthly bulletin. An earlier date does not prove an active compromise; it shows that the newer level is not installed on that device.

Do not use the main Android version as a substitute for the patch date. Two phones running the same Android release can have different patch levels because their components and support schedules differ.

Read also: Android 17 security and privacy settings to turn on

Why the August Patch May Not Be Available Yet

Publishing the Android bulletin starts the process; it does not confirm delivery to every phone. Each manufacturer integrates the relevant fixes, tests its device software, and rolls out an update. Availability can also vary by carrier, region, and rollout batch.

The official August update announcement for compatible Pixel phones is a Pixel-specific example. It is not a schedule for Samsung, Motorola, or other Android devices.

If the update does not appear:

• check the manufacturer’s official support site or help center to see whether the model remains supported;
• restart the phone and check Settings again;
• confirm that the device has free storage and a stable connection;
• avoid update packages offered through unofficial links, messages, or forums.

If the device is supported, wait for its official rollout. A short delay is not the same as abandoned support, and installing a package from an unknown source can introduce a different risk.

Android, Security Patches, and Google Play Updates Differ

Your phone can show several dates because Android components are delivered through different channels:

A new Google Play system update does not necessarily mean the manufacturer’s complete security patch is installed. The reverse can also be true. Checking both dates gives you a better view than checking either one alone.

What to Do When a Phone Stops Receiving Security Patches

Start by checking the device maker’s official support policy. If the support window has ended, the phone may keep working, but it will no longer receive some future operating-system fixes.

While you decide what comes next, update apps through the official store, remove apps you no longer use, review permissions, and maintain backups. These steps can reduce exposure, but they do not replace operating-system patches or provide complete protection.

If you use the phone for sensitive records or financial services, the confirmed end of security support should be part of your replacement decision. When comparing a new phone, review the promised update period along with battery life, storage, camera quality, and price.

Frequently Asked Questions

Will an Android update delete my files?

An official update normally preserves apps and personal files, but no system change is completely free of failure. Back up important information, follow the manufacturer’s instructions, and do not interrupt the installation or turn off the phone while it is applying the update.

Why does my phone say it is up to date with an old patch date?

The message may mean that no newer package is available for that model, region, or carrier at that time. Check the manufacturer’s support policy. If the phone is still supported, wait for the official staged rollout and check again later.

Should I download the patch from a website?

Use your phone’s Settings and the manufacturer’s official channels. A package shared through a webpage, message, or forum may not match your exact model and could have been modified. Avoid bypassing the supported update process unless the manufacturer itself documents it for your device.

What to Do Now

Open Settings and check both the Android security update date and the Google Play system update date. If an official update is waiting, back up the phone and complete the installation. If the patch is old, verify the model’s support status before deciding what to do next.

Continue Reading

• What happens when you tap Allow on an Android app
• A 5-minute monthly Android phone check
• Phone settings to check before traveling
• How to lock apps on Android

Sources

• Android Security Bulletin — August 2026
• Android Help — check and update your Android version
• Google Pixel Support — August 2026 update

O post Android Security Update: Check the August Patch apareceu primeiro em PSafe Blog.

The interesting part is that your phone during the World Cup is not just a screen. It becomes a kind of invisible diary of your routine: collecting places, times, preferences, searches, images, videos, conversations, and small habits that say a lot about how you experienced that moment.

In short: your phone can remember where you were, what you searched, which photos you took, which routes you followed, which networks you connected to, and which apps were part of your day. This is not about fear. It is about realizing how much of your digital life passes through it.

Your Phone Becomes an Invisible World Cup Diary

Think about a game day away from home. Before the match even starts, you may have already searched where to watch it, opened Maps, called a rideshare, coordinated the time by text message, checked the weather, and saved a payment receipt.

Then come the photos, videos, lineup screenshots, halftime memes, group chat voice messages, and that quick search to see who plays tomorrow. It all feels separate, but your phone connects those clues into a timeline of your experience.

That is the most interesting part: it does not only know “technical data.” It knows your routine. It knows your preferences. It knows you searched for a restaurant near the stadium, took a photo at 6:42 p.m., opened Maps after the game, and checked the standings before going to sleep.

It Knows Where You Went — and How You Lived the Game

Maps, rideshare apps, photos, and searches can help reconstruct an entire day. Depending on the settings active on your device, your phone may record the route to the meetup, the places you visited, how long you spent getting there, and even the spots where you stopped.

This kind of record can be useful, especially when traveling. It helps you remember the name of a restaurant, review a route, or recover details from a trip. At the same time, it is worth knowing that this memory exists, can be reviewed, and can also be adjusted or deleted in your device settings.

Your Photos Say More Than They Seem

Your photo gallery is one of the most personal parts of your phone. During the World Cup, it stores celebrations, meetups, trips, flags, streaming screens, food, airports, streets, and little behind-the-scenes moments you may forget later.

But photos also organize context. They can be sorted by date, location, face, album, source app, and time. A screenshot of the standings, a selfie at the bar, and a video at the airport tell a very clear story about that day.

A good habit is to use that memory in your favor: create a World Cup album, delete temporary screenshots, remove duplicate images, and save only what really matters. Organizing your gallery also means organizing part of your digital life.

Read also: What Can Public Wi-Fi See on Your Phone During the World Cup?

Your Searches Reveal How You Watch the Game

During the World Cup, search becomes a reflex. “Where to watch the game?”, “USA lineup,” “next match,” “bar near me,” “how to get to the stadium,” “group results,” “best memes from the match.”

Those searches show interests, timing, and quick decisions. They do not just say what you wanted to know. They say when you needed to know it, where you may have been, and what kind of content made sense in that moment.

How to Keep Your Digital Life More Organized During the World Cup

Before the next game, make a simple deal with your phone: less clutter, more control.

Delete downloads you only needed for one day. Clear old payment receipt screenshots. Organize important photos. Review files saved in messaging apps. Check which accounts stayed logged in on other devices and which Wi-Fi networks were saved automatically.

It is also worth checking which travel, ticketing, or streaming apps still make sense after the event — and removing the ones you will not use anymore.

dfndr security on Game Day

Your phone holds important moments: photos, logins, messages, routes, payments, and memories. That is why protecting it also means protecting your digital life.

dfndr security monitors whether your data appears in breaches, protects apps you do not want anyone else opening — useful when you hand your phone to someone to take a photo — and warns you about suspicious links before you click. All working in the background, without complicating your routine.

Before you head out for the game, make sure your phone is as ready as you are.

Download dfndr security for free on Google Play. 

O post Going to Watch the World Cup? Your Phone Knows More About You Than You Think apareceu primeiro em PSafe Blog.