← Sunday 18 Octobernote 10 of 13
CybersecuritySun 18 Oct 2026 · 10 of 13

Israeli ad firm Discover-Tech used to deliver Candiru spyware in "AdFection" campaign

Verified · 6/6 supported1 cited · 1 min read

securityweek.com reports that Israeli advertising company Discover-Tech was used to deliver Candiru zero‑click spyware through targeted advertisements . securityweek.com reports that the operation delivering the spyware was dubbed “AdFection” . securityweek.com reports that Candiru spyware infected devices at Al Jazeera via these zero‑click ad attacks, according to Citizen Lab . securityweek.com reports that Discover-Tech’s ads allowed threat actors to fingerprint, de‑anonymize, and track millions of devices, with its Controlium platform enabling large‑scale de‑anonymization . securityweek.com reports that the company is likely a front for a broader espionage campaign linking ad vendors with spyware providers .

Why it matters. securityweek.com reports that weaponizing the advertising ecosystem to deliver Candiru spyware enables mass de‑anonymization and compromises media organizations such as Al Jazeera .

Earlier on Cybersecurity

Sat 17 Oct 2026Cyber Incident Cripples Federal Bankruptcy Noticing Center for a Weeksecurityweek.com reports that a cybersecurity incident affecting BAE Systems infrastructure caused an outage of the Bankruptcy Noticing Center (BNC). securityweek.com reports that the BNC, which is operated by BAE Systems as a contractor for the federal judiciary, was unable to generate or send notices for about a week. securityweek.com reports that the Administrative Office of the US Courts said all access to BNC systems and websites was unavailable. securityweek.com reports that the National Creditor Registration Service was offline, preventing users of the courts’ electronic filing system from generating creditor mailing lists. securityweek.com reports that BAE first notified the Administrative Office about the problem late on October 9, and several bankruptcy courts posted notices on October 13 describing the issue as a service disruption.Sat 17 Oct 2026UBC researchers detail "ICS‑Sniper" attack on cloud‑hosted SCADA systemssecurityweek.com reports that University of British Columbia researchers detailed a proof‑of‑concept attack called "ICS‑Sniper" targeting industrial facilities that rely on cloud‑hosted SCADA systems. securityweek.com reports that the attack exploits a compromised router to analyze VPN‑encrypted packet size, direction and timing to predict when critical commands or data will be exchanged and then drop payload‑carrying packets. securityweek.com reports that the researchers tested the attack on an emulated version of the SWaT water‑treatment testbed.Fri 16 Oct 2026UK Legal Aid Agency breach scope expands to records from 1978securityweek.com reports that the UK Legal Aid Agency discovered records dating back to 1978 were compromised in an April 2025 data breach. securityweek.com reports that in May 2025 the agency announced hackers had accessed and exfiltrated personal information of individuals who applied for legal aid, but did not disclose the full scope at that time. securityweek.com reports that a recent incident update shows most compromised records relate to applications, claims, and payments submitted between 2007 and 2025, while approximately 250,000 records predate 2007, with the majority from the 1990s and 2000s and the earliest verified record from 1978. securityweek.com reports that compromised data includes names, addresses, dates of birth, National Insurance Numbers, postcodes, case reference numbers, answers entered into the Client and Cost Management System, phone numbers, and other personal details. securityweek.com reports that hackers also exfiltrated information about legal aid practitioners, such as contracts, schedules, office locations, payment details, and user account credentials.
Next · Climate techChina's September 2026 EV sales hit 67% market share →