SS7 and Diameter signaling flaws can track and intercept phones
Attackers on the carrier signaling network can locate phones and redirect calls and SMS without touching the device.
32
Organization
Citizen Lab
- Mentions · 7d6
- Mentions · 30d33
- All mentions53
- First seenAug 14, 2026
- Last mentioned12h ago
Timeline
53 articles · newest firstResearchers say Discover-Tech ads may track Starlink users
TrendAI says codename SHADOW-EARTH-79 won about 13% of observed Starlink ad bids and was the top bidder in 105 countries.
58
US and EU politicians call targeted ads a zero-click spyware risk
European Parliament members asked the EU to investigate whether institutions can be infected through online advertising.
44
Pegasus targeted Serbian professor; prosecutor got spyware alert
Citizen Lab reports at least 15 Pegasus targeting cases before Serbia’s October 25 elections.
68
Discover-Tech accused of tracking Starlink users through online ads
TrendAI found one bidder dominating sampled Starlink ad auctions in 105 countries; the work does not show infection or a Starlink breach.
62
Vučić concedes Serbian vote after reported Pegasus and Cellebrite targeting
Researchers say mercenary spyware and Cellebrite extractions hit opposition figures, journalists, a rector and a prosecutor.
58
Senators cite ad-delivered spyware; ad groups defend vetting
Citizen Lab's AdFection report says Discover-Tech ads carried zero-click mercenary spyware, including impressions on government networks.
72
Authors say generative AI is scaling transnational repression
A Just Security piece argues models are used to identify, monitor, and target diaspora activists and exiles.
36
Citizen Lab director says AI is amplifying surveillance threats
Ron Deibert told SecTor 2026 that authoritarian trends and AI propaganda are intensifying threats the lab studies.
22
Pegasus confirmed on Belgrade rector’s iPhone before elections
Citizen Lab reports a high-confidence zero-click infection in 2026, bringing known Serbian civil-society spyware cases to at least 16.
74
Pegasus confirmed on Belgrade rector's iPhone before Serbia election
Citizen Lab reports a high-confidence zero-click infection but does not name the operator, date, or flaw.
76
Citizen Lab says AdFection used ads to deliver Candiru spyware
Discover-Tech allegedly helped infect at least 45 Al-Jazeera devices without a victim click.
74
Pegasus infected another Serbian opposition figure, researchers say
Citizen Lab confirmed a Belgrade rector’s infection this year; a prosecutor’s phone is still being analyzed.
70
Pegasus found on Serbian critics' phones before elections
Citizen Lab reports a zero-click Pegasus infection on a Belgrade rector's phone in 2026; a prosecutor's spyware type is still unidentified.
72
Encryption Is Getting Squeezed From All Sides
Canada's C-22 bill could force encryption backdoors and metadata retention, prompting Signal and Psiphon to threaten exit.
62
Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel
Citizen Lab says Candiru infected at least 45 Al Jazeera devices through Discover-Tech zero-click ads.
78
Zero-click attacks used targeted ads to deliver Candiru spyware
Citizen Lab says Candiru spyware hit Al Jazeera devices through zero-click malicious ads called AdFection.
76
The Lawful Access Act’s threats to Canada’s national security
Citizen Lab warns Canada’s Bill C-22 could force surveillance access into everyday communications technology.
46
Targeted ads delivered 0-click exploits to install mercenary malware
Citizen Lab says Discover-Tech ads delivered Candiru zero-click exploits that installed mercenary spyware.
82
Zero-click spyware infecting devices through online ads, researchers say
Citizen Lab says Candiru used Discover-Tech ads to zero-click infect Al Jazeera journalists and reach sensitive government networks.
78
Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads
Citizen Lab says Candiru spyware hit at least 45 Al Jazeera devices via zero-click ads.
82
Hackers Use Online Ads to Infect Devices With Spyware Without a Single Click
Citizen Lab says Candiru spyware reached Al Jazeera devices through zero-click malicious online ads called AdFection.
78
Spyware vendors found a way to make targeted ads even worse
Citizen Lab says Discover-Tech ads delivered Candiru zero-click spyware that infected Al Jazeera devices.
80
AdFection: Beyond the Click: Citizen Lab Exposes Ad-Delivered Spyware Networks
Citizen Lab says Candiru used Discover-Tech ads for zero-click spyware, hitting at least 45 Al Jazeera devices.
82
Just Viewing an Online Ad Can Infect Your Device With Spyware, Researchers Reveal
Citizen Lab says Candiru spyware reached Al Jazeera devices through zero-click code hidden in online advertisements.
84
Citizen Lab says governments are abusing online ads to hack people with ‘zero-click’ spyware
Citizen Lab says Candiru and Bindecy used Discover-Tech ads to deliver zero-click spyware, including against Al Jazeera.
82
‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads
Citizen Lab says Candiru spyware infected Al Jazeera phones through zero-click ads placed by Discover-Tech.
78
Spyware manufacturer had access to data harvested by former Polish government, current PM says
Poland says NSO kept control of Pegasus servers and could access data collected from Polish targets.
74
The Secrets of a US Spyware King
Paragon's CEO says the firm cannot detect or remotely shut off misuse of its mobile spyware.
70
Citizen Lab Slams Trump Administration, 'Techno-Fascist' Executives
Citizen Lab's Ron Deibert warns the US government and willing tech executives are enabling pervasive surveillance.
36
Toronto-Based VPN Provider Plans to Quit Canada Over Lawful-Access Bill
Psiphon will leave Canada if Bill C-22 requires secret surveillance access for police and CSIS.
46
Fixer, Financier, Spymaster: How the UAE’s Sheikh Tahnoon is Setting His Sights on AI Dominance
Citizen Lab’s Ron Deibert says UAE royal Sheikh Tahnoon is extending surveillance power through AI financing.
46
The Secrets of the US Spyware King
Paragon CEO Andrew Boyd admits the company cannot technically detect Graphite spyware misuse and canceled Italy's contracts without investigating allegations.
55
Apple Patches CoreGraphics Zero Day Exploited in Attacks
Apple patched CVE-2026-86950, a CoreGraphics zero-day reportedly exploited against targeted iOS users.
84
UN Reports Citing Citizen Lab Submissions Published
Two UN reports citing Citizen Lab cover digital risks to defenders and unregulated cybermercenaries.
33
Submission to the Immigration and Refugee Board of Canada
Citizen Lab told Canada's refugee board that Chinese authorities monitor citizens and diaspora members in Canada.
40
Israeli contractor BlackCore trained Angolan officials in online influence operations
Citizen Lab links Israeli firm BlackCore to training Angolan officials to run covert influence campaigns with fake personas and pro-government content.
48
China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor
China-linked UNC3569 exploited a Sogou Input Method flaw to deploy GRAYRABBIT backdoor on Windows machines across East and Southeast Asia.
74
Group of Bipartisan Lawmakers Ask US Government to Ban Several Hack-for-Hire Firms
Bipartisan US lawmakers urged Commerce Secretary Lutnick to sanction three Indian hack-for-hire firms, including BellTroX, over espionage targeting US citizens.
40
Lawmakers call on Treasury to sanction hackers-for-hire
Bipartisan US lawmakers asked Treasury to sanction three India-based hack-for-hire firms accused of long-running espionage against Americans.
45
Related CVEs
by mentions- CVE-2026-8695026%8.8Out-of-Bounds Write in Apple CoreGraphics Enables Code Execution on iOS and macOS
- CVE-2021-3800339%8.8Memory Corruption in Chromium V8 JSON.stringify Affects Chrome, Edge, Opera
- CVE-2025-242004%6.1Incorrect Authorization in Apple iOS/iPadOS Lets Attackers Disable USB Restricted Mode
- Out-of-bounds write in Apple image handling crashes apps
Appears with
- Applevendor · 15
- Googlevendor · 13
- Pegasusmalware · 13
- NSO Groupvendor · 12
- SHARE Foundationorganization · 12
- Candiruthreat actor · 11
- Discover-Techorganization · 10
- Al Jazeeravictim · 10
- IAB Europeorganization · 10
- Amnesty Internationalorganization · 9
- Googleorganization · 9
- Beeswaxorganization · 8
- NoviSpymalware · 8
- Controliumproduct · 8
- Confiantorganization · 8
- Pegasusproduct · 7
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.