Targeted ads delivered 0-click exploits to install mercenary malware

Ars Technica security feed covering major cybersecurity developments, including targeted-ad 0-click spyware delivery, internet-exposed IoT compromises, counterfeit TLS certificates, AI-agent abuse and vulnerabilities, actively exploited Zimbra command-injection flaws, large-scale account compromises, and surveillance-camera breaches. The feed includes both confirmed incidents and emerging research or speculative threats; the highest-impact items involve mercenary spyware, certificate authority compromise, remote code execution, and sensitive-data theft.