[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"focus:zero-click-attacks-used-targeted-ads-to-deliver-candiru-spyware-mve0o4mq":3},{"item":4},{"id":5,"title":6,"slug":7,"summary":8,"severity":9,"category":10,"cve_ids":11,"affected_products":12,"action_required":18,"article_ids":19,"ioc_summary":21,"source_urls":22,"status":24,"expires_at":25,"created_at":26,"updated_at":27,"articles":28,"rapid":21},"71229223-1c64-48eb-89f4-b0a7a3bab8cb","Zero-click attacks used targeted ads to deliver Candiru spyware","zero-click-attacks-used-targeted-ads-to-deliver-candiru-spyware-mve0o4mq","Candiru spyware was deployed to Al Jazeera staff via malicious ads using zero-click AdFection technique. No user interaction required. Millions of users potentially exposed to these ads across the web.","critical","advisory",[],[13,14,15,16,17],"Discovere-Tech","Controlium","DevilsTongue","AdFection","Aladdin","Hunt for Candiru indicators of compromise in network telemetry and endpoint logs. Block known ad networks and Discovere-Tech infrastructure. Monitor for command and control beaconing from affected staff devices.",[20],"85050e46-f281-44fa-9a1b-22d585b931f7",null,[23],"https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fzero-click-attacks-used-targeted-ads-to-deliver-candiru-spyware\u002F","archived","2026-10-20T16:05:10.302+00:00","2026-10-18T16:05:14.761198+00:00","2026-10-20T16:05:28.023644+00:00",[29],{"id":20,"title":6,"url":23,"slug":30},"zero-click-attacks-used-targeted-ads-to-deliver-candiru-spyware-f10c7f"]