> TritonInfoSec News
Home / Oct 16, 2026 / Story
0
#1 The Hacker News general October 15, 2026 at 16:01 UTC

Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads

By [email protected] (The Hacker News)

AI Summary

Citizen Lab researchers confirmed that Candiru, an Israeli mercenary spyware vendor, infected devices at Al Jazeera through zero-click attacks delivered via ordinary online ads — no user interaction required, with the exploit triggering the moment an ad loaded, sometimes entirely off-screen. This marks the first confirmed case of mercenary spyware delivered through targeted advertising infrastructure, raising serious implications for ad networks, regulators, and any organization whose staff consume online media.

Read full article → https://thehackernews.com/2026/10/citizen-lab-trac…

Relevance score: 92.0/100

# More from October 16

  1. 2
    Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation The Hacker News
  2. 3
    Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability The Hacker News
  3. 4
    Microsoft drops an actively exploited zero-day among record high of 1,413 vulnerabilities CyberScoop
  4. 5
    U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud The Hacker News
  5. 6
    Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing The Hacker News
  6. 7
    Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App The Hacker News
  7. 8
    Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages The Hacker News
  8. 9
    Fridge hack costing millions and sparking fires stemmed from poor security Ars Technica Security
  9. 10
    UK Legal Aid Agency: Hackers stole records dating back to 1978 BleepingComputer