Help Net Security چهارشنبه ۱۳ آبان ۱۴۰۵ · ۱۸:۰۸

Russian hackers target iOS and Android users with n-day exploits

Russia’s APT29 has been using compromised websites, lookalike domains and a hijacked web analytics service to target iOS and Android users with exploits for patched flaws and steal their cookies, messages and Wi-Fi passwords, according to Sekoia. APT29 watering holes target mobile devices with n-day exploits (Source: Sekoia) The company’s Threat Detection & Research (TDR) team spotted the operation in mid-October 202…

Mobile Development

Read the full article at Help Net Security Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

CyberInsider چهارشنبه ۱۳ آبان ۱۴۰۵ · ۱۹:۲۸

Russian hackers use breached sites to steal iPhone and Android data

A cyberespionage campaign linked to Russia’s APT29 hacking group used compromised websites and a hijacked analytics script to target iPhone and Android users. Visiting an affected page was enough to trigger an attack on a vulnerable device, potentially exposing browser sessions, saved Wi-Fi passwords, and private messages. Sekoia’s researchers uncovered the campaign in mid-October 2026 … The post Russian hackers use…

Mobile Development

Source

Help Net Security چهارشنبه ۱۳ آبان ۱۴۰۵ · ۱۸:۱۰

Cycurion Habit verifies threats and validates fixes before closing cases

Cycurion has launched Habit, an AI-driven security operations center (SOC) built to identify threats before they disrupt operations. The launch also marks Cycurion’s repositioning as a predictive cybersecurity company, built around a newly assembled team of former U.S. Intelligence Community and private-sector cyber experts. Habit doesn’t chase alerts. It learns what normal looks like for every identity, device, and…

Incident Response & Forensics

Source

Help Net Security چهارشنبه ۱۳ آبان ۱۴۰۵ · ۱۸:۰۱

Descope Envoy brings AI agent authentication to consumer apps

Descope has announced Envoy, a set of capabilities that gives personal AI agents a delegated sign-in path alongside a consumer app’s existing authentication flows. Consumer companies can now accept agents as first-class users—with their own identities, permissions, and approval flows—without rebuilding their identity stack. GoFundMe, You.com, GoodRx, and Composio are among several launch and design partners for Envoy…

Identity & Access Security

Source

The Hacker News چهارشنبه ۱۳ آبان ۱۴۰۵ · ۱۷:۵۷

APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits

The Russia-linked threat actor known as APT29 is said to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites, fake domains, and a supply chain attack involving a Ukrainian web analytics service called Plerdy SEO Tracker. "The injected JavaScript code collects browser and device attributes," Sekoia researchers Amaury-Jacques Garçon and

Supply Chain Security Threat Intelligence Programming & Languages

Source