APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits

Russian hackers use breached sites to steal iPhone and Android data

A cyberespionage campaign linked to Russia’s APT29 hacking group used compromised websites and a hijacked analytics script to target iPhone and Android users. Visiting an affected page was enough to trigger an attack on a vulnerable device, potentially exposing browser sessions, saved Wi-Fi passwords, and private messages. Sekoia’s researchers uncovered the campaign in mid-October 2026 … The post Russian hackers use…

Debian apt security update (man-in-the-middle)

Russian hackers target iOS and Android users with n-day exploits

Russia’s APT29 has been using compromised websites, lookalike domains and a hijacked web analytics service to target iOS and Android users with exploits for patched flaws and steal their cookies, messages and Wi-Fi passwords, according to Sekoia. APT29 watering holes target mobile devices with n-day exploits (Source: Sekoia) The company’s Threat Detection & Research (TDR) team spotted the operation in mid-October 202…

The Race Against the 3-Day Clock: How Rapid7 Helps Meet BOD 26-04 Compliance

Introduction to BOD 26-04On June 10, 2026, CISA issued Binding Operational Directive 26-04, "Prioritizing Security Updates Based on Risk." Strip away the regulatory language and it reads like a single operational fact: for a vulnerability that is actively exploited, publicly reachable, and grants an attacker full control, you now have three calendar days to remediate it — and you must run a forensic investigation in…