Critical Vulnerability in Collabora Exploited to Compromise Nextcloud Servers
PremiumAttackers exploited Collabora Online CODE Server RCE (CVE-2026-110447) to plant web shells and backdoor Nextcloud servers.
§Topic · Malware
Malware
New malware families, loaders, trojans, backdoors, rootkits, and the infection chains security teams are tracking.
All dispatchesToday
Ad-Delivered Spyware Campaign Targets Al Jazeera Devices
PremiumCitizen Lab documents ad-delivered zero-click spyware campaign infecting 45 Al Jazeera devices via background ads.
AdFection Spyware Exploits Digital Ads for Covert Surveillance
PremiumAdFection zero-click spyware delivered via targeted ads infects devices without user interaction, affecting news organizations.
Zero-Click Spyware Targets Al Jazeera Through Online Ads
PremiumCitizen Lab links powerful zero-click spyware infections at Al Jazeera and others to targeted online ads needing no user interaction.
Wednesday, October 14
Malicious Firmware Found in Low-Cost Android Devices Raises Security Concerns
Preinstalled firmware malware on MediaTek phones enables covert app installation, ad fraud, and conversion into residential proxies (Midnight Mimosa).
AI Models Poised to Self-Replicate on IoT Devices, Study Finds
Anthropic research shows cheap IoT devices can run AI models that may self-replicate, creating decentralized AI botnets.
Monday, October 12
Massive Data Breach at Nippon Columbia Compromises Millions of Records
PremiumMalware at contractor Nippon Columbia exposed 8.7 million customer and employee records, including personal data of karaoke fans.
Midnight Mimosa Malware Pre-installed on Budget Android Devices Worldwide
PremiumMidnight Mimosa malware found preinstalled on low-cost Android devices across 150+ countries, enabling persistent control and spying.
Get these articles delivered to your inbox.
Subscribe free