Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads

The Hacker News - Oct 15, 2026

Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online ads, in attacks that needed no click or other action from the user, researchers at the Citizen Lab said Thursday. The hidden attack code ran the moment an ad loaded on the screen, and in some cases the ad loaded out of sight, in the background. The Citizen

Read full article

More News

New study sounds alarm as Doomsday Glacier melts more aggressively than thought

Oct 15, 2026

New study sounds alarm as Doomsday Glacier melts more aggressively than thought

New study sounds alarm as Doomsday Glacier melts more aggressively than thoughtAccording to new research by a team of glaciologists, the planet’s widest glacier is experiencing accelerated mass loss beyond their models, meaning its significant impact on global sea level rise could be double...

GTA 6 - all you need to know about Rockstar's blockbuster game

Oct 15, 2026

GTA 6 - all you need to know about Rockstar's blockbuster game

A new launch trailer for Grand Theft Auto VI reveals more details about what's set to be the biggest game of the year.

Inside the Plague Research Labs at the Heart of a Russian Mystery

Oct 15, 2026

Inside the Plague Research Labs at the Heart of a Russian Mystery

A Russian researcher, who died from an unknown illness, worked at a remote anti-plague facility. Few foreigners have visited these labs, which dot the former Soviet states, and are shrouded in secrecy.

Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams

Oct 15, 2026

Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams

A long-running Traffic Distribution System (TDS) known as Help TDS to a Russian-language affiliate program called Hotejka, which appears to be a rebrand of a traffic monetization operation dubbed ROI777. Help TDS is assessed to be active since at least 2017, offering PHP code templates to partners and affiliates that are installed into compromised websites with an aim to direct unsuspecting

Sheep are disappearing from our hills - and our dinner plates

Oct 15, 2026

Sheep are disappearing from our hills - and our dinner plates

Have we have passed "peak sheep" in the UK?

French crypto unicorn Ledger warns of AI security risks

Oct 15, 2026

French crypto unicorn Ledger warns of AI security risks

Artificial intelligence is "changing the security landscape". That's according to Ledger, a French unicorn of cryptocurrency that's seeking a bigger role in digital security. Chief Technology Officer Charles Guillemet says: "Finding vulnerabilities and exploiting them costs almost nothing. So this is the new challenge that we have, as the security industry in general – how can we raise the bar for security so it becomes so difficult to break systems? And I think hardware is part of the equation."

Alibaba sets sights on record-breaking Singles’ Day with 1 million brands joining festival

Oct 15, 2026

Alibaba sets sights on record-breaking Singles’ Day with 1 million brands joining festival

Alibaba Group Holding is gearing up for its annual Singles’ Day shopping festival on major online marketplaces Taobao and Tmall, with the company expecting a record one million global brands to take part this year. Pre-sales for the event open on Thursday, followed by the formal sale next Tuesday. The company projects more than 70 million products to feature, also a record for the festival. Created by Alibaba in 2009, Singles’ Day has grown into the world’s largest online shopping festival. Also...

NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks

Oct 15, 2026

NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks

NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005. There are three memory bugs that F5, the company behind NGINX, says could crash a worker process or possibly let an attacker run code, and each requires a specific configuration to exploit. A fourth lets an attacker forge a TLS session that could

DeepSeek offers user refunds after suffering another major outage

Oct 15, 2026

DeepSeek offers user refunds after suffering another major outage

Chinese artificial intelligence firm DeepSeek apologised and promised compensation to users after its services suffered a nearly five-hour outage on Thursday. DeepSeek will issue users a full refund for any consumption between October 8 and October 14 in the form of credits, according to a notice posted on the Hangzhou-based start-up’s application programming interface (API) platform. DeepSeek’s namesake chatbot and API services for its V4 Pro and V4.1 Flash models went offline on Thursday...

How could a superintelligence take over the world? Let me count the ways

Oct 15, 2026

How could a superintelligence take over the world? Let me count the ways

OpenAI recently announced perhaps its biggest mathematics breakthrough yet: it released novel results on 377 high-profile open problems. Artificial intelligence (AI) casually solved these decades-old problems as a mere by-product of training. The community of mathematicians did not universally welcome this development, with University of Connecticut professor Alvaro Lozano-Robledo commenting: “I am not sure at this point what this (hostile?) takeover of the mathematical landscape is trying to...

Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing

Oct 15, 2026

Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing

Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw. One code-execution flaw is in React Server Components, and the other in librsvg, the open-source library Next.js uses through the sharp package to handle SVG images. The fixes are in

China, North Korea open long-delayed trade bridge

Oct 15, 2026

China, North Korea open long-delayed trade bridge

China and North Korea formally opened the Yalu River Bridge on Thursday, connecting Dandong in China with Sinuiju in North Korea. Beijing says the bridge will promote economic and trade cooperation.

Recommended

About Us
Logo

In-Depth Science delivers comprehensive and compelling news and analysis on everything science and technology, seven days a week in a reader-friendly format.

Contact us: sales[at]indepthscience.com

Copyright © 2015 - 2026 In-Depth Science. All Rights Reserved.