Court Rules Against NSO Group
May 13 2025The case is over: A jury has awarded WhatsApp $167 million in punitive damages in a case the company brought against Israel-based NSO Group for exploiting a software vulnerability that...
Read moreNew iPhone Exploit Uses Four Zero-Days
January 4 2024Kaspersky researchers are detailing “an attack that over four years backdoored dozens if not thousands of iPhones, many of which belonged to employees of Moscow-based security firm Kaspersky.”...
Read moreNew Windows/Linux Firmware Attack
December 12 2023Interesting attack based on malicious pre-OS logo images:
LogoFAIL is a constellation of two dozen newly discovered vulnerabilities that have lurked for years, if not decades, in Unified Extensible...
Read more
Zero-Click Exploit in iPhones
September 13 2023Make sure you update your iPhones:
Citizen Lab says two zero-days fixed by Apple today in emergency security updates were actively abused as part of a zero-click exploit chain...
Read more
New Zero-Click Exploits against iOS
April 20 2023Citizen Lab has identified three zero-click exploits against iOS 15 and 16. These were used by NSO Group’s Pegasus spyware in 2022, and deployed by Mexico against human rights...
Read moreZoom Exploit on MacOS
August 17 2022This vulnerability was reported to Zoom last December:
The exploit works by targeting the installer for the Zoom application, which needs to run with special user permissions in order...
Read more
More on NSO Group and Cytrox: Two Cyberweapons Arms Manufacturers
December 20 2021Citizen Lab published another report on the spyware used against two Egyptian nationals. One was hacked by NSO Group’s Pegasus spyware. The other was hacked both by Pegasus...
Read moreApple Sues NSO Group
November 24 2021Piling more on NSO Group’s legal troubles, Apple is suing it:
The complaint provides new information on how NSO Group infected victims’ devices with its Pegasus spyware. To prevent...
Read more
MacOS Zero-Day Used against Hong Kong Activists
November 12 2021Google researchers discovered a MacOS zero-day exploit being used against Hong Kong activists. It was a “watering hole” attack, which means the malware was hidden in a legitimate...
Read more
Recent Comments