#commercial-spyware
#commercial-spyware
[ follow ]
#cybersecurity #zero-day-vulnerabilities #intellexa #sanctions #paragon-solutions #government-surveillance
Information security
fromSecurityWeek
1 month ago'DarkSword' iOS Exploit Kit Used by State-Sponsored Hackers, Spyware Vendors
Security researchers discovered DarkSword, a sophisticated iOS exploit kit used by Russian state-sponsored hackers and commercial spyware vendors to compromise Apple devices with minimal user interaction.
Information security
fromTechzine Global
1 month agoChina and spyware companies dominate zero-day attacks
Zero-day vulnerability exploits reached 90 cases in 2025, with Chinese cyber espionage groups and commercial spyware companies driving attacks increasingly toward enterprise infrastructure and security equipment.
fromSecurityWeek
2 months agoApple Patches iOS Zero-Day Exploited in 'Extremely Sophisticated Attack'
Tracked as CVE-2026-20700, the zero-day flaw is described as a memory corruption issue that could be exploited for arbitrary code execution. It affects dyld (Dynamic Link Editor), the system component responsible for loading dynamic libraries into memory and which acts as a connector between application code and system frameworks. "Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26," Apple noted in its advisory.
Apple
Information security
fromThe Hacker News
4 months agoWeekly Recap: Apple 0-Days, WinRAR Exploit, LastPass Fines, .NET RCE, OAuth Scams & More
Critical zero-day vulnerabilities in Apple and Google products and a .NET SOAPwn flaw are actively exploited; install updates and patch affected software immediately.
fromTheregister
5 months agoCISA: Spyware crews breaking into Signal, WhatsApp accounts
The agency says the activity it's seeing suggests an increasing focus on "high-value" individuals - everyone from current and former senior government, military, and political officials to civil society groups across the US, the Middle East, and Europe. In many of the campaigns, attackers delivered spyware first and asked questions later, using the foothold to deploy more payloads and deepen their access.
Information security
fromThe Hacker News
5 months agoCISA Warns of Active Spyware Campaigns Hijacking High-Value Signal and WhatsApp Users
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday issued an alert warning of bad actors actively leveraging commercial spyware and remote access trojans (RATs) to target users of mobile messaging applications. "These cyber actors use sophisticated targeting and social engineering techniques to deliver spyware and gain unauthorized access to a victim's messaging app, facilitating the deployment of additional malicious payloads that can further compromise the victim's mobile device," the agency said.
Information security
[ Load more ]