Topic: zero-click attack

  • Samsung Phones Infected by "Landfall" Spyware for Nearly a Year

    Samsung Phones Infected by "Landfall" Spyware for Nearly a Year

    The Landfall spyware campaign targeted Samsung Galaxy phones by exploiting a zero-day vulnerability (CVE-2025-21042) to steal personal data without user interaction, using maliciously crafted DNG image files. Samsung released a security patch in April 2025 to fix the vulnerability, and the attack...

    Read More »
  • One Click Triggered a Stealthy Copilot Attack

    One Click Triggered a Stealthy Copilot Attack

    A critical vulnerability in Microsoft's Copilot AI was patched, which could have allowed attackers to steal sensitive user data like name, location, and chat history with just a single click. The exploit tricked Copilot by using a malicious link with a disguised prompt, causing the AI to autonomo...

    Read More »