Apple issued threat notifications last week warning users in 99 countries that they may have been targeted by mercenary spyware, according to the Financial Times and TechCrunch. German lawmakers and government officials were among those notified, prompting the country's Federal Office for Information Security to urge recipients to assume their devices were compromised. The attacks reportedly exploited a zero-click vulnerability requiring only a target's phone number.
9to5mac.com
· 2026-11-03
Germany's federal cybersecurity agency (BSI) said members of the Bundestag and other prominent individuals received Apple threat notifications indicating they may have been targeted by government-backed spyware. A government spokesperson said Berlin is taking the warning seriously but did not confirm which officials were affected. Apple's alerts, sent to users in 99 countries, do not identify attackers or confirm actual compromise.
techcrunch.com
· 2026-11-02
Apple has issued high-confidence threat notifications to iPhone users across 110 countries, warning that they may have been targeted by mercenary spyware. The company has not disclosed the attackers' identity, the attack method, or whether any devices were actually compromised, but said the campaign involves narrowly targeted attempts rather than broad phishing. Researcher Costin Raiu first reported the alerts on October 30, noting they are separate from a similar round of notifications Apple sent in August.
techspot.com
· 2026-11-02
Apple's Lockdown Mode, a feature that restricts iPhone functionality to block sophisticated spyware attacks, blocked the 2023 'Blastpass' exploit that installed Pegasus spyware via iMessage on unprotected devices. Apple pays double its usual bug bounty to researchers who find ways to bypass the feature, and allows users to exempt specific contacts, apps, and websites from its restrictions, though doing so reduces protection.
engadget.com
· 2026-10-27
Researchers at the University of Toronto's Citizen Lab identified a technique called 'AdFection' in which an Israeli ad-tech company, Discover-Tech, allegedly exploited real-time ad-bidding systems to deliver spyware without requiring any user clicks. The report says this method was used to help spyware vendor Candiru, now rebranded as Integrity Labs, infect at least 45 devices belonging to Al-Jazeera staff.
darkreading.com
· 2026-10-19
The real-time auction that places ads is an automated pipeline for running code and targeting individuals. Both properties have been used deliberately.
gokawiil.com
· 2026-10-19
The Guardian reports that UK retailer Co-op has deployed an AI system built on an OpenAI model to continuously monitor and grade employee phone calls against more than 50 criteria, assigning pass or fail scores. Workers say the system can track them for several hours a day, with one whistleblower calling it 'oppressive and dystopian' because it records every word rather than occasional compliance checks.
futurism.com
· 2026-10-18
Citizen Lab researchers documented a zero-click technique, dubbed AdFection, that delivered Candiru spyware to Al Jazeera Media Network devices simply by rendering malicious online advertisements. The ads, placed through mainstream ad networks by Israeli firm Discover-Tech using its Controlium platform, contacted a 'NOAS' server that checked device details like IP address before deciding whether to push spyware-loading code to that specific target.
bleepingcomputer.com
· 2026-10-16
Citizen Lab researchers say they found the first confirmed case of a zero-click spyware campaign, delivered through an advertising platform called Controlium run by Israeli firm Discover-Tech. The platform allegedly let advertising partners identify and de-anonymize targets, then silently download spyware such as Candiru onto victims' machines, including computers at Al Jazeera. Citizen Lab says Discover-Tech's ads appeared across roughly 200,000 websites and apps, funneling traffic toward servers tied to Candiru as part of a broader tracking operation.
techspot.com
· 2026-10-16
Citizen Lab researchers reported a campaign dubbed AdFection in which malicious ads containing zero-click exploits installed spyware on targeted phones without any user interaction. The group confirmed 45 infected devices at Al Jazeera during 2024 and 2025, and linked the ad delivery to Israeli company Discover-Tech, which brokers ad placements between advertisers and publishers.
arstechnica.com
· 2026-10-15
Citizen Lab says it has confirmed the first publicly documented case of zero-click mercenary spyware spread through targeted online advertising, a method it calls 'AdFection.' The researchers say dozens of Al Jazeera devices were compromised via ads run by Discover-Tech, whose Controlium platform can profile and deanonymize internet users before silently infecting selected targets with no interaction required.
tech.slashdot.org
· 2026-10-15
University of Toronto's Citizen Lab reports that Discover-Tech, an Israeli digital advertising agency, runs a platform called Controlium that profiles and deanonymises internet users through ordinary-looking ads, then enables third-party spyware firms to silently infect selected targets' devices without any click. Researchers say dozens of devices at Al Jazeera were compromised this way, and that millions of users worldwide have been served Discover-Tech ads since 2024, including in Yemen, Brazil, Mexico and Czechia.
theguardian.com
· 2026-10-15
GoKawiil