
APT29 targets iOS and Android users with n-day exploits
APT29 uses compromised sites and lookalike domains to deliver n-day exploits stealing cookies and device data from iOS and Android users spotted in mid-October 2026.
8 stories, newest first · one card per story

APT29 uses compromised sites and lookalike domains to deliver n-day exploits stealing cookies and device data from iOS and Android users spotted in mid-October 2026.

APT29 uses Plerdy SEO Tracker supply chain compromise to serve n-day exploits stealing cookies and device data from iOS and Android users in 2026.

APT29 deploys n-day exploits via watering-hole sites on iOS and Android devices with no user interaction.

Google Threat Intelligence says 141 flaws were exploited by August 2026, exceeding all of 2025, with AI tooling accelerating n-day weaponization and shrinking exploit timelines.

GTIG says AI-found flaws skew toward remote code execution, and attackers hit BeyondTrust CVE-2026-1731 within four days.
Google says vulnerability disclosures doubled to 10,740 a month as AI accelerates n-day exploitation.

Google Threat Intelligence reports monthly vulnerability disclosures doubled in 2026, with exploited-in-the-wild counts nearly doubling as AI accelerates discovery.

Chinese-speaking Red Heron actors mass-exploit Gitea n-day RCE CVE-2026-60004 to steal source code, credentials, and pivot into victim networks.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views