Citizen Lab researchers documented a zero-click technique, dubbed AdFection, that delivered Candiru spyware to Al Jazeera Media Network devices simply by rendering malicious online advertisements. The ads, placed through mainstream ad networks by Israeli firm Discover-Tech using its Controlium platform, contacted a 'NOAS' server that checked device details like IP address before deciding whether to push spyware-loading code to that specific target.
bleepingcomputer.com
· 2026-10-16
Citizen Lab researchers say they found the first confirmed case of a zero-click spyware campaign, delivered through an advertising platform called Controlium run by Israeli firm Discover-Tech. The platform allegedly let advertising partners identify and de-anonymize targets, then silently download spyware such as Candiru onto victims' machines, including computers at Al Jazeera. Citizen Lab says Discover-Tech's ads appeared across roughly 200,000 websites and apps, funneling traffic toward servers tied to Candiru as part of a broader tracking operation.
techspot.com
· 2026-10-16
Citizen Lab researchers reported a campaign dubbed AdFection in which malicious ads containing zero-click exploits installed spyware on targeted phones without any user interaction. The group confirmed 45 infected devices at Al Jazeera during 2024 and 2025, and linked the ad delivery to Israeli company Discover-Tech, which brokers ad placements between advertisers and publishers.
arstechnica.com
· 2026-10-15
Citizen Lab says it has confirmed the first publicly documented case of zero-click mercenary spyware spread through targeted online advertising, a method it calls 'AdFection.' The researchers say dozens of Al Jazeera devices were compromised via ads run by Discover-Tech, whose Controlium platform can profile and deanonymize internet users before silently infecting selected targets with no interaction required.
tech.slashdot.org
· 2026-10-15
University of Toronto's Citizen Lab reports that Discover-Tech, an Israeli digital advertising agency, runs a platform called Controlium that profiles and deanonymises internet users through ordinary-looking ads, then enables third-party spyware firms to silently infect selected targets' devices without any click. Researchers say dozens of devices at Al Jazeera were compromised this way, and that millions of users worldwide have been served Discover-Tech ads since 2024, including in Yemen, Brazil, Mexico and Czechia.
theguardian.com
· 2026-10-15
Security researchers say devices at Al Jazeera were infected with Candiru spyware (rebranded 'Integrity Labs') through targeted online ads, a technique they call AdFection. They identify Israeli firm Discover-Tech as the buyer of the malicious ads, running a platform called Controlium that can de-anonymize and infect devices automatically when an ad loads, with analysis of four billion bidding records showing ads served across nearly 200,000 sites and apps.
citizenlab.ca
· 2026-10-15
Researchers at the University of Toronto's Citizen Lab identified a campaign, named 'AdFection,' in which an Israeli-registered ad company allegedly linked to a spyware vendor's servers infected dozens of devices through digital advertising, with no action required from victims. Citizen Lab says this is the first publicly documented technical evidence of spyware being distributed this way.
wired.com
· 2026-10-15
Security researchers identified a vulnerability dubbed 'SneakPeek' in Anthropic's Claude Code Desktop application, located in its file preview feature. The flaw reportedly lets attackers silently exfiltrate sensitive developer credentials, including SSH private keys, AWS credentials, and Claude OAuth tokens, without requiring any user interaction.
darkreading.com
· 2026-10-14
Researchers unveiled WeWorm, a proof-of-concept worm that spreads through WeChat calls without user interaction, affecting both iOS and Android devices. The demo involved three phones where an attacker could hijack accounts and propagate the infection by simply calling victims, who need not answer or even interact with their phones.
calif.io
· 2026-09-12
A sponsored analysis argues that traditional SEO metrics like rankings and click-through rates no longer capture how consumers actually find brands, since AI tools now generate synthesized answers directly on screen instead of sending users to websites. The piece introduces 'pixel depth' as a way to measure how prominently a brand appears within an AI-generated answer, rather than its position on a search results page. It also notes that large language models extract and recombine facts from multiple sources rather than indexing whole pages, meaning a company's website is just one input among many.
venturebeat.com
· 2026-09-03
GoKawiil