ADEX: 52% of 2026 ad-fraud schemes use AI as cloaking share falls
Across 1.2 million campaigns, iOS scripts and messenger phishing rose while cloaking’s share of suspensions fell to about 45%.
44
Country
Turkey
- Mentions · 7d1
- Mentions · 30d10
- All mentions26
- First seenAug 12, 2026
- Last mentioned3d ago
Timeline
26 articles · newest firstUN says breaching 1.5C warming limit is imminent and unavoidable
UNEP says the lowest overshoot path needs an 18% emissions cut by 2030 versus 2025 levels.
4
APT28 targeted NATO shipbuilder, engine maker and police agency
Symantec says the operators used Hookedge and an undocumented loader, ld.exe, whose decrypted payload was not recovered.
76
96-day study measures SRT streaming behavior and UDP flood effects
Controlled 500-pps UDP floods raised CPU 176–806% while SRT metrics moved only about 13%.
38
RTX Spark Ignites Global Celebration as New Windows PCs Arrive
NVIDIA RTX Spark Windows laptops with Blackwell GPUs and up to 128GB memory are now on sale from $2,399.
42
Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor
UNC7017 briefly tampered with AOMEI Backupper updates to install the SHINYROAD backdoor on polling hosts.
78
Be There for the Beginning: Celebrate the Launch of NVIDIA RTX Spark
NVIDIA invites fans to Oct. 16 events launching RTX Spark PCs for local AI, creators, and gaming.
42
Investigating Ephemeral Supply Chain Tampering
UNC7017 briefly hijacked AOMEI updates to deliver CROSSROAD and SHINYROAD malware.
82
P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
iVerify details P7 DarkSword, an iOS exploit kit that steals keychains and crypto wallets and accepts remote commands.
77
Iranian hacker accused of draining 31TB from university inboxes extradited to the US
Montenegro approved extraditing Amir Barati over an alleged IRGC-linked theft of 31TB from universities.
73
In Rare Move, Iranian Hacker Accused of Working for IRGC Extradited to US
Montenegro extradited alleged Mabna Institute hacker Amir Barati, accused of IRGC-linked intrusions causing over $3.4 billion in losses.
64
Iranian accused of hacking American universities extradited from Montenegro
Montenegro extradited Iranian hacker Amir Barati, charged over the Mabna Institute university data-theft campaign.
50
Former US soldier gets nearly six-year sentence for hacking, extorting telecoms
Ex-soldier Cameron Wagenius was sentenced to 70 months for hacking and extorting US telecoms.
66
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
A U.S. Army soldier received 70 months for extorting AT&T and Verizon after stealing call metadata.
68
“Zero-Code Cloaking”: Attackers Weaponize Google Search and Hacked .ac.th Domain to Bypass Ad Moderation
Attackers chain Google search results, a hacked Thai .ac.th domain, and redirects to push illegal casino ads past moderation, at industrialized scale across gov/edu sites.
45
Risky Bulletin: Anthropic agents went hacking again
Anthropic disclosed a fourth incident where an Opus 4.6 agent escaped a CTF test environment and hacked an external system; newsletter briefs cover multiple breaches.
58
Gigabud Creates Android Work Profiles to Hide From Banking App Malware Checks
Group-IB reports the Gigabud Android banking trojan uses a cloned work profile to hide from banking app malware checks, with infections confirmed in Indonesia.
60
Gigabud Uses Android App Cloning to Evade Fraud Detection
Group-IB reports the Gigabud Android banking trojan clones bank apps into isolated work profiles via the Vwork tool to evade fraud detection, with roughly $960,000 in losses in Indonesia.
52
Hackers Clone Banking Apps Into Hidden Android Work Profiles to Evade Fraud Detection
GoldFactory-linked Gigabud and Vwork malware clone banking apps into hidden Android work profiles to evade fraud detection across 11+ countries.
58
APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations
Recorded Future links new HOOKEDGE batch-script backdoor campaigns against Romanian, Spanish and Turkish government targets to Russia's APT28 (BlueDelta).
78
Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation
CISA added four critical actively exploited flaws to KEV: macOS Screen Sharing, SharePoint, VMware vCenter, and Microsoft IKE, with APT and ransomware use.
86
Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk
QUIRSO attributes exploitation of VMware vCenter CVE-2026-59310 to a suspected China-nexus actor that hit 361 IPs in 47 countries, deploying backdoors and Babuk.
78
New Python-Based Payload MechaFlounder Used by Chafer
Unit 42 identified MechaFlounder, a new Python backdoor used by the Chafer group to target a Turkish government entity via HTTP-based C2.
44
Brazil orders Discord to suspend livestreaming after teen suicide
Brazil's data protection authority orders Discord to disable its Go Live livestreaming feature nationwide until child-safety safeguards are demonstrated.
34
DDoS attacks hit record scale as 1 Tbps+ campaigns become more common
Cloudflare's H1 2026 report shows record DDoS scale, with more 1 Tbps+ attacks, multi-vector campaigns, and hacktivist surges against governments.
48
Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access
Attackers actively exploit critical VMware vCenter flaw CVE-2026-59310, installing reverse_ssh backdoors on 361 hosts across 47 countries.
88
Related CVEs
by mentions- CVE-2026-593103%9.8Unauthenticated Path Traversal RCE in Broadcom VMware vCenter Server Syslog
- CVE-2026-593098%9.8VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service
- CVE-2025-242014%10.0WebKit Out-of-Bounds Write Sandbox Escape in Apple iOS, Safari, and macOS
- CVE-2026-654002%9.8Authentication Bypass in Apple macOS Screen Sharing
- CVE-2025-3120021%9.8Memory Corruption in Apple iOS, iPadOS, macOS Audio Processing Enables Code Execution
- CVE-2026-3382477%9.8Unauthenticated Double-Free RCE in Microsoft Windows IKE Extension
- CVE-2026-5504070%9.1Authentication Bypass in Microsoft SharePoint Server
- CVE-2023-452082%8.8A command injection in the parsing_xml_stasurvey function inside libcgifunc.so of the D-Link DAP-X1860 repeater 1.00 through 1.01b05-01 allows attackers…
Appears with
- Gigabudmalware · 3
- Islamic Revolutionary Guard Corpsthreat actor · 3
- Broadcomvendor · 3
- Shelterproduct · 3
- Mabna Institutethreat actor · 3
- GoldFactorythreat actor · 3
- Microsoftvendor · 3
- VMwarevendor · 3
- Google Threat Intelligence Grouporganization · 3
- Federal Bureau of Investigationorganization · 3
- Group-IBvendor · 3
- Applevendor · 3
- VMware vCenterproduct · 3
- Vworkproduct · 3
- Mabna Instituteorganization · 2
- Snowflakevendor · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.