> TritonInfoSec News
Home / Oct 18, 2026 / Story
0
#5 BleepingComputer general October 16, 2026 at 17:20 UTC

Zero-click attacks used targeted ads to deliver Candiru spyware

By Bill Toulas

AI Summary

Candiru spyware was delivered to Al Jazeera Media Network devices via zero-click attacks using targeted online advertisements served through Israeli ad firm Discover-Tech, requiring only that the malicious ad render on the victim's device. The campaign demonstrates that commercial ad infrastructure can be weaponized by nation-state-tier spyware vendors to fingerprint and selectively infect high-value targets without any user interaction. This represents a significant escalation in the operational sophistication of mercenary spyware delivery chains.

Read full article → https://www.bleepingcomputer.com/news/security/zer…

Relevance score: 85.0/100

# More from October 18

  1. 1
    Prolific Chinese espionage group exploits BeyondTrust zero-day CyberScoop
  2. 2
    Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day SecurityWeek
  3. 3
    BeyondTrust patches zero-day exploited in attacks since August BleepingComputer
  4. 4
    Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack BleepingComputer
  5. 6
    Critical BlockStrap flaw lets hackers run code on Magento servers BleepingComputer
  6. 7
    Drupal patches critical RCE flaws, warns exploits may emerge soon BleepingComputer
  7. 8
    Cybersecurity incident at BAE Systems disrupts US bankruptcy court system CyberScoop
  8. 9
    OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract The Hacker News
  9. 10
    F5, Juniper Networks Patch Critical Vulnerabilities SecurityWeek