/
data_types_exposed:location_data × limpar

Resultados

6 casos · pág. 1/1

newsroom.trendmicro.com · medium

TrendAI H1 2026 APT roundup: nation-state actors use AI across the intrusion lifecycle, plus zero-days and OT attacks

TrendAI™ (Trend Micro) published its H1 2026 APT Activity Roundup on July 29, 2026. It finds nation-state actors used AI in more stages of the intrusion lifecycle than in any prior half-year the company has tracked. China-aligned actors used generative AI to refine exploits and iteratively build malware through "vibe coding", and one AI a…

bitdefender.com · medium

US military branches disable mobile advertising IDs on government devices over commercial location data targeting risk

Reportedly, the US Army, Air Force, Navy and Special Operations Command have disabled mobile advertising IDs on government-issued phones and computers. The move follows concerns that commercially available location data has been used to target American forces in the Middle East. It became public after Senator Ron Wyden released letters, h…

theregister.com · high

Citizen Lab: Discover-Tech 'AdFection' ad network delivered Candiru zero-click spyware to Al Jazeera devices

Citizen Lab reported the first publicly confirmed zero-click mercenary spyware attack delivered through targeted online ads, a technique it calls "AdFection". The Israel-based adtech firm Discover-Tech allegedly acts as a front and middleman between the advertising ecosystem and spyware vendors. Citizen Lab traced attacks on at least 45 A…

wired.com · high

AdFection: Candiru spyware delivered via zero-click malicious ads from Discover-Tech hits 45 Al Jazeera devices

Citizen Lab documented AdFection, a campaign in which the Israeli-founded ad firm Discover-Tech delivered zero-click mercenary spyware attributed to Candiru through the online advertising ecosystem. During 2024 and 2025, 45 devices belonging to Al Jazeera were targeted. Citizen Lab calls this the first detailed public technical evidence o…

yokai.hakaisecurity.io · high

CVE-2026-12191: Insecure pickle deserialization in comma.ai openpilot modeld enables root RCE on comma 3X

The Hakai Yokai Research Team disclosed CVE-2026-12191, an insecure deserialization flaw (CWE-502) in openpilot, the open-source Level 2 driver assistance system from comma.ai that supports over 275 vehicle models. The modeld process calls Python pickle.load() / pickle.loads() on model and metadata files with no validation, signature or h…