Estonia (Country): news timeline & CVEs

Zero-click spyware infecting devices through online ads, researchers say

Citizen Lab says Candiru used Discover-Tech ads to zero-click infect Al Jazeera journalists and reach sensitive government networks.

Citizen Lab and Confiant say Israeli ad firm Discover-Tech used its Controlium platform to deliver zero-click spyware through online ads. The ads infected devices of at least 45 Al Jazeera journalists and were rendered on sensitive networks including NATO, the U.S. Department of Defense, Estonia’s RIA, the IAEA, and the ICC. Candiru allegedly hired Discover-Tech; the ads sent millions of devices to Candiru servers and the spyware can record calls, enable microphones, and steal messages. Researchers reviewed four billion placement records, and Google and other platforms have since blocked Discover-Tech.

The Recordupdated Oct 16, 17:20 UTC · 11h agofirst Oct 15, 19:00 UTC · 1d agoThreat actor in the wild 12 sources2

Reporting vulnerabilities to Estonian companies

A YouTube talk covers how researchers report vulnerabilities to companies in Estonia.

A Lobsters-linked YouTube video is titled “Reporting vulnerabilities to Estonian companies.” The available text is only a comments placeholder, with no transcript, CVE identifiers, or incident details. The topic appears to concern vulnerability disclosure practice rather than a confirmed breach or exploit.

Lobsters · securityOct 10, 14:56 UTC · 6d agoResearch1

Network Segmentation Failures Are Expanding the Corporate Attack Surface

Forescout finds nearly half of OT and medical segments also hold IT or IoT, widening lateral movement.

Forescout analyzed 47,700 real-world network segments and found the average held 54 devices spanning IT, OT, IoT, and IoMT. Nearly half of segments with OT or medical devices also contained IT or IoT, and only 2% of IP-camera segments held cameras alone. Forescout says mixed segments enable lateral movement: Akira used poorly segmented cameras to bypass EDR in early 2025, and pro-Russian NoName057(16) was linked to more than 300 IP-camera takeovers in 2026, including Estonian and Canadian targets.

Infosecurity MagazineSep 22, 12:00 UTC · 24d agoResearch in the wild1

Estonia

Timeline3 articles

Appears with

Zero-click spyware infecting devices through online ads, researchers say

Reporting vulnerabilities to Estonian companies

Network Segmentation Failures Are Expanding the Corporate Attack Surface