Mirax Android Trojan Rides Streaming-App Ads to Empty Victims’ Bank Accounts
A newly documented Android banking trojan called Mirax is spreading through ads in low-reputation streaming apps, abusing Accessibility permissions to hijack phones and drain accounts across the Middle...
Apple Fires Off New Mercenary Spyware Warnings to iPhone Users Across 99 Countries
Apple has issued a fresh wave of mercenary spyware threat notifications to iPhone users in 99 countries, separate from August's alerts and tied to new attacks. The company...
Instagram Ads Are Quietly Dropping Spyware on iPhones — No Tap Required
Researchers at iVerify and Report URI have traced a live malvertising operation that used a World Cup-themed Instagram ad to plant iOS spyware on a victim's phone without...
AdFection Campaign Used Online Ads to Deliver Zero-Click Spyware
Citizen Lab researchers have documented AdFection, a zero-click delivery method that used advertising infrastructure to target devices with Candiru-linked spyware. At least 45 Al Jazeera devices were targeted,...
OpenAI Insider Charged With Secretly Recording Executive Boardroom Meetings
OpenAI says it discovered a hidden audio recorder wired into a USB port in an executive conference room, and U.S. prosecutors have charged an employee with intercepting private...
DarkSword Exploit Service Uses Coruna Malware to Steal iPhone Wallet Recovery Phrases
Researchers uncovered exposed infrastructure showing how DarkSword and Coruna turn iPhone exploitation into a commercial wallet-theft service. The toolkit injects modules into wallet apps and searches photos and...
Iran-Linked Blinder Tunnel Campaign Targets Iraqi Infrastructure Through Fake Coding Test
An Iran-aligned operation used a counterfeit Dubai Airports recruitment process and a weaponized Visual Studio project to target an Iraqi developer. The chain deployed persistent remote access and...
Apple Patches CoreGraphics Zero-Day Used in Spyware-Style Attacks on iPhones and iPads
Apple's iOS 26.7.1 and iPadOS 26.7.1 updates close CVE-2026-86950, an out-of-bounds write in CoreGraphics that attackers used in what Apple describes as an extremely sophisticated attack against specifically...