Tag Archives: zero-day

Android vs iPhone: Which Is More Secure? CVEs, Zero-Days, Exploit Prices and Patch Speed in Numbers (2026)

By | |
Leave a comment
Android vs iPhone: which one is more secure? 501 vs 317 CVEs, $5-7M zero-click iPhone exploit, phishing 16% vs 8%, 0 attempts on the iPhone at Pwn2Own 2024-2026

Today’s post answers the question I hear more than any other: “Michał, iPhone or Android?”. Instead of opinions, I gathered numbers: 501 vs 317 CVEs, 15 zero-days used in attacks on phones in 2025, 70 vs 72 days to patch according to Project Zero, $7M for an iPhone exploit and $5M for Android, 16% vs 8% of devices hit by a phishing attempt. There’s also the fresh Pwn2Own, where the Pixel 10 fell three times while nobody touched the iPhone for the third year running, and the Polish banking trojans you install yourself. The verdict is less obvious than fans of either camp suggest – and at the end you’ll find 7 things worth doing whatever logo is on the back of your phone. 🔓 Continue reading →

Safest browser in 2026? Chrome, Edge, Opera, Brave, Firefox and Safari by the numbers – three engines, 15 zero-days

By | |
Leave a comment
Graphic: 6 browsers, 3 engines, 15 zero-days - engine market share Blink/Chromium ~79%, WebKit ~16%, Gecko ~3%

Today’s post is for anyone who has ever wondered whether Chrome is “full of holes” and Firefox is “safe”. You have six browsers on your desktop, but under the hood there are only three engines – and it’s the engine, not the logo, that decides whether someone takes over your laptop after a single click on a link. This year Google has already fixed seven Chrome holes that were exploited in attacks before a patch existed, and every one of them also sat in Edge, Opera and Brave. I ran the numbers for 2025 and 2026: zero-days, CVEs, patch speed, money spent on security teams and where data really gets lost. At the end you’ll find my “seven laws of browser security” and what I would pick myself. Spoiler: the safest browser is the one that’s up to date. Continue reading →