Tag
A zero-click vulnerability called 'SMS of Death' lets a single malformed WAP Push SMS crash Android's com.android.phone process, dropping active calls (including emergency calls) and potentially bricking telephony via SQLite corruption; Google classified it as non-security and won't fix.
Citizen Lab researchers say Israeli ad agency Discover-Tech used its Controlium platform to deliver 'zero-click' mercenary spyware via millions of online ads, compromising dozens of Al Jazeera devices and potentially exposing users across government, UN, NATO, and ICC networks.
Citizen Lab 暴露 AdFection：Discover-Tech 利用定向广告作为零点击雇佣兵 spyware（Candiru/Integrity Labs）的投放管道，感染了 Al Jazeera 等机构的设备，并借助 Controlium 平台实现设备去匿名化与自动感染。
Citizen Lab researchers revealed "AdFection," the first public technical evidence of zero-click mercenary spyware silently infecting devices through targeted digital ads, with 45 Al Jazeera devices compromised via ads from Discover-Tech linked to Candiru spyware infrastructure.
A security researcher describes finding a zero-click heap overflow vulnerability in Apple's EXR file parser, enabling remote compromise of iOS devices via iMessage without any user interaction.
Researchers used publicly available AI models to discover a critical zero-click, memory-corruption vulnerability in Zoom's annotation feature, allowing remote code execution on all meeting participants across all platforms. Zoom has issued fixes, but the research highlights how AI is lowering the barrier to nation-state-level exploits.
CVE-2026-52884 describes a zero-click remote code execution vulnerability in Notepad++ via path traversal, affecting users on Windows.
Google's upcoming 'AI Mode' in search is predicted to drastically change SEO by 2026, potentially wiping out traditional keyword strategies and forcing marketers to focus on contextual answers, zero-click results, and first-party data.