Topic: commercial spyware
-
Pall Mall Process: Defining Responsible Cyber Intrusion
The Pall Mall Process, a joint UK-France initiative with 27 governments and major tech firms, aims to establish international standards for the commercial cyber intrusion industry to curb dangerous practices while acknowledging legitimate security needs. The process is currently consulting with i...
Read More » -
France Alerts Apple Users to Major New Spyware Threat
French cybersecurity authorities have issued urgent warnings to Apple users about a major new spyware threat, following alerts from Apple indicating potential device compromise. Affected users are advised to contact CERT-FR immediately, preserve Apple's notification email, and avoid altering thei...
Read More » -
Urgent Samsung Patch Stops Spyware Exploit
Samsung has released a critical security update for a vulnerability (CVE-2025-21042) in its image processing library, which was actively exploited to install the LANDFALL spyware on mobile devices. The spyware uses a zero-click infection method via manipulated image files, allowing it to infect d...
Read More » -
CISA Urges Immediate Patch for Samsung Spyware Zero-Day
A critical vulnerability (CVE-2025-21042) in Samsung smartphones allows attackers to install LandFall spyware via manipulated DNG images sent through WhatsApp, affecting Android 13 and newer devices. The spyware, exploited since July 2024, can steal sensitive data like contacts, messages, and loc...
Read More » -
Apple Offers Up to $5 Million for Bug Bounty Rewards
Apple has increased its bug bounty rewards to up to $5 million, doubling the base reward to $2 million for sophisticated exploit chains, to counter advanced threats like mercenary spyware. The program now includes bonuses for bypassing Lockdown Mode and finding pre-release software vulnerabilitie...
Read More »