importantSYS.SOURCE: The Hacker News• 2026-10-15T21:31:57+05:30

Citizen Lab Identifies Zero-Click Candiru Spyware Infections at Al Jazeera via Targeted Online Ads

#spyware #zero-click #online-ads #cybersecurity

Citizen Lab discovered that Al Jazeera was infected with zero-click Candiru spyware through targeted online ads, which executed malicious code without user interaction. The attack leveraged background ad loading to bypass traditional security measures.

Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online ads, in attacks that needed no click or other action from the user, researchers at the Citizen Lab said Thursday.

The hidden attack code ran the moment an ad loaded on the screen, and in some cases the ad loaded out of sight, in the background.

The Citizen

Read original article

*** END OF TRANSMISSION ***

> META UNVEILS OPEN-WEIGHT AI MODEL OPTIMIZED FOR MACS > AMAZON'S PANOS PANAY ENVISIONS AI-DRIVEN AMBIENT DEVICES REDEFINING PERSONAL COMPUTING > BLUESKY EXPANDS COMMERCE FEATURES WITH PAYMENT INTEGRATION > UNAUTHORIZED ACCESS ATTEMPTS ON SONARR SETUP VIA TORRENT SITES > ANTHROPIC GRANTS METR RESEARCHERS EMPLOYEE-LEVEL ACCESS FOR AI SYSTEM EVALUATION > BLUESKY LAUNCHES AI-DRIVEN ATTIE PLATFORM FOR DECENTRALIZED WEB DEVELOPMENT > ANALYZING THE INTERCONNECTED GLOBAL CRISES AND PATHWAYS TO RESILIENCE > WEEKLY SECURITY THREATS REPORT: ADOBE RCE, DNS WALLET THEFT, AND 23 ADDITIONAL VULNERABILITIES > E INK KALEIDO 4: NEXT-GENERATION COLOR EPAPER PLATFORM RELEASE > TECHCRUNCH FOUNDER SUMMIT EARLY BOOKING DISCOUNT EXPIRATION REMINDER: OCTOBER 16 DEADLINE> META UNVEILS OPEN-WEIGHT AI MODEL OPTIMIZED FOR MACS > AMAZON'S PANOS PANAY ENVISIONS AI-DRIVEN AMBIENT DEVICES REDEFINING PERSONAL COMPUTING > BLUESKY EXPANDS COMMERCE FEATURES WITH PAYMENT INTEGRATION > UNAUTHORIZED ACCESS ATTEMPTS ON SONARR SETUP VIA TORRENT SITES > ANTHROPIC GRANTS METR RESEARCHERS EMPLOYEE-LEVEL ACCESS FOR AI SYSTEM EVALUATION > BLUESKY LAUNCHES AI-DRIVEN ATTIE PLATFORM FOR DECENTRALIZED WEB DEVELOPMENT > ANALYZING THE INTERCONNECTED GLOBAL CRISES AND PATHWAYS TO RESILIENCE > WEEKLY SECURITY THREATS REPORT: ADOBE RCE, DNS WALLET THEFT, AND 23 ADDITIONAL VULNERABILITIES > E INK KALEIDO 4: NEXT-GENERATION COLOR EPAPER PLATFORM RELEASE > TECHCRUNCH FOUNDER SUMMIT EARLY BOOKING DISCOUNT EXPIRATION REMINDER: OCTOBER 16 DEADLINE