2 publishers · first seen Wed, 04 Nov 2026 22:26 UTC · updated Thu, 05 Nov 2026 09:00 UTC
Cybersecurity researchers have uncovered a hacking campaign targeting iPhone and Android users, potentially exposing personal data through zero-click attacks. The hackers exploited security flaws in these phones to access information such as WhatsApp chats, passwords, photos, and browsing history. The campaign, discovered by Sekoia, involved compromised websites, including fake versions of trusted sites and a Ukrainian web analytics service. Researchers believe the hackers may be linked to Russia's Foreign Intelligence Service. Apple and Google have already fixed the exploited vulnerabilities through software updates, advising users to install the latest updates for protection.
Google has recently patched a critical security vulnerability in Android that could allow remote code execution without user interaction. The flaw, identified as CVE-2026-58868, affects Android versions 14 through 17. Google has not confirmed any active exploits of this vulnerability, but patches are being rolled out. Users are advised to check for updates and ensure their devices are running the latest software to protect against this and other critical flaws highlighted in Google's November security bulletin.
Content auto-generated. May contain inaccuracies.