Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel
2026-10-17T13:23:59Z•403c2a9dd5d51217fd680aeeecd9f24b31f9473610ed7b2512f4da72f2072fa0
CVE-2026-102764APTBeyondTrustCandiruChinese-APTF5ICS-securityJuniperMicrosoft-Officeactive-exploitationcyber-incidentdefense-evasiondevice-fingerprintinginitial-accessmalvertisingremote-code-executionzero-click-spywarezero-day
What happened
SecurityWeek RSS digest covering spyware delivery through advertising infrastructure, active exploitation of a BeyondTrust zero-day by a Chinese APT, critical F5 and Juniper vulnerabilities, numerous Microsoft Office RCE flaws, and other cybersecurity news. The most urgent item is exploitation of CVE-2026-102764 for initial access with post-compromise tool deployment and artifact deletion.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- 403c2a9dd5d51217fd680aeeecd9f24b31f9473610ed7b2512f4da72f2072fa0
- Enrichment time
- 2026-10-17T13:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.