Zero-Click Spyware Targets Al Jazeera Through Online Ads
PremiumCitizen Lab links powerful zero-click spyware infections at Al Jazeera and others to targeted online ads needing no user interaction.
§The archiveMon · Wed · FriM · W · F
News.
Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.
Follow on LinkedInBrowse by topic
Today
Microsoft Sets New Record with Patch Tuesday, Addressing Over 1,400 Vulnerabilities
PremiumMicrosoft released fixes for 1,413 vulnerabilities including an actively exploited Windows Shell zero-day; prioritize high-severity updates.
Palo Alto Networks Urges Immediate Patching for Critical PAN-OS Vulnerability
PremiumPAN-OS authenticated RCE (CVE-2026-0322) observed in limited exploitation against firewalls; immediate patching urged.
Cisco Addresses Critical Vulnerability in Secure Email Gateway
PremiumCritical Cisco Secure Email Gateway zero-day allows unauthenticated email to write files and execute root commands; patches available.
Wednesday, October 14
U.S. Charges 14 in North Korean Remote Work Fraud Scheme
DOJ charges 14 individuals for involvement in a North Korean remote work scheme that funneled funds via stolen identities and scams.
Cyberattack Exploits Refrigeration Systems in French Retail Stores
SANS digest: retail refrigeration attacks, GitLab CVSS 10.0 patch, and possible attacker ID via AI session logs affecting banking investigation.
Zoom Flaws Risk Sensitive Data Exposure via Network Access
Certificate validation flaws in Zoom clients could allow attackers to access sensitive notes and data without authentication via network control.
Critical Vulnerabilities in LG Smart TVs Allow Root Access via Local Network
Chained webOS vulnerabilities let local-network attackers gain root access on affected LG Smart TV models without owner interaction or PIN.
Malicious Firmware Found in Low-Cost Android Devices Raises Security Concerns
Preinstalled firmware malware on MediaTek phones enables covert app installation, ad fraud, and conversion into residential proxies (Midnight Mimosa).
Critical SSRF Flaw in SonicWall SMA Devices Under Active Exploitation
Critical SSRF in SonicWall SMA appliances under active attack, putting customers at risk of remote compromise.
Ransomware Groups Exploit Long-Standing Palo Alto VPN Vulnerability
ReliaQuest reports Qilin and Settra ransomware groups actively exploit a Palo Alto VPN vulnerability patched in May but still widespread.
Critical Ghostscript Vulnerability Puts Servers at Risk Through PDF Uploads
Ghostscript CVE-2026-39919 heap buffer overflow enables RCE via crafted PDF uploads against servers using the interpreter.
Critical Security Flaw in SAP's Cloud SDK for Python Exposes OAuth2 Credentials
SAP Cloud SDK Python SSRF (CVSS 10) can leak OAuth2 client credentials from multi-tenant apps to attacker-controlled servers.
CyberXero Exploits AI to Breach Ukrainian Records
CyberXero combined commodity tools with Anthropic Claude Code to orchestrate an automated campaign stealing 628,000+ Ukrainian records from WordPress and e-commerce sites.
Ahold Delhaize Cyberattack Spurs System Shutdowns to Safeguard Operations
Ahold Delhaize disconnected systems after a cyber incident disrupted operations across stores in multiple countries.
Ransomware Data Theft Skyrockets, Transforming Cyber Extortion
Zscaler reporting large increases in ransomware data theft, with significant exfiltration volumes changing extortion dynamics.
Fortinet FortiSandbox Vulnerability Poses Significant Security Risk
FortiSandbox GUI auth bypass CVE-2026-107656 could let remote attackers access administrative functions without credentials.
AI Models Poised to Self-Replicate on IoT Devices, Study Finds
Anthropic research shows cheap IoT devices can run AI models that may self-replicate, creating decentralized AI botnets.
Massive Crypto Theft Tied to Ledger Signer Tampering
Hardware implant on Ledger Signer stolen user data and enabled attackers to drain wallets, linked to an $86 million heist.
GitLab Addresses Critical Security Flaw with Urgent Patches
GitLab released patches for a CVSS 10.0 unauthenticated RCE in CE/EE that allowed arbitrary server code execution.
Get these articles delivered to your inbox.
Subscribe free