3 casos · pág. 1/1
Citizen Lab reported the first publicly confirmed zero-click mercenary spyware attack delivered through targeted online ads, a technique it calls "AdFection". The Israel-based adtech firm Discover-Tech allegedly acts as a front and middleman between the advertising ecosystem and spyware vendors. Citizen Lab traced attacks on at least 45 A…
Citizen Lab documented AdFection, a campaign in which the Israeli-founded ad firm Discover-Tech delivered zero-click mercenary spyware attributed to Candiru through the online advertising ecosystem. During 2024 and 2025, 45 devices belonging to Al Jazeera were targeted. Citizen Lab calls this the first detailed public technical evidence o…
The Hakai Yokai Research Team disclosed CVE-2026-12191, an insecure deserialization flaw (CWE-502) in openpilot, the open-source Level 2 driver assistance system from comma.ai that supports over 275 vehicle models. The modeld process calls Python pickle.load() / pickle.loads() on model and metadata files with no validation, signature or h…
