AdFection Campaign Used Online Ads to Deliver Zero-Click Spyware
Citizen Lab researchers have documented AdFection, a zero-click delivery method that used advertising infrastructure to target devices with Candiru-linked spyware. At least 45 Al Jazeera devices were targeted,...
OpenAI Insider Charged With Secretly Recording Executive Boardroom Meetings
OpenAI says it discovered a hidden audio recorder wired into a USB port in an executive conference room, and U.S. prosecutors have charged an employee with intercepting private...
DarkSword Exploit Service Uses Coruna Malware to Steal iPhone Wallet Recovery Phrases
Researchers uncovered exposed infrastructure showing how DarkSword and Coruna turn iPhone exploitation into a commercial wallet-theft service. The toolkit injects modules into wallet apps and searches photos and...
Iran-Linked Blinder Tunnel Campaign Targets Iraqi Infrastructure Through Fake Coding Test
An Iran-aligned operation used a counterfeit Dubai Airports recruitment process and a weaponized Visual Studio project to target an Iraqi developer. The chain deployed persistent remote access and...
Apple Patches CoreGraphics Zero-Day Used in Spyware-Style Attacks on iPhones and iPads
Apple's iOS 26.7.1 and iPadOS 26.7.1 updates close CVE-2026-86950, an out-of-bounds write in CoreGraphics that attackers used in what Apple describes as an extremely sophisticated attack against specifically...
Antino Backdoor Hides Its Entire Command Channel Inside Microsoft 365
A China-linked espionage campaign has deployed a Rust backdoor whose native command-and-control workflow runs through Outlook and OneDrive. Cisco Talos found roughly 350 compromised endpoints across eight countries,...
North Korea-Linked Malware Uses Ethereum Transfers to Rotate Command Servers
A North Korea-linked campaign is encoding command-server locations in Ethereum recipient addresses, giving cross-platform malware a resilient recovery channel. The operation targets developers with fake recruitment tasks and...
Konni-Linked Espionage Campaign Uses Fake PDFs to Target Ukraine-Focused Groups
A campaign dubbed Operation Conflict Compass uses PDF-themed Windows shortcuts and a downloader called VelvetCake against people working on Ukraine-related issues. Researchers link the operation to the North...