article thumbnail

Poland probes Pegasus spyware abuse under the PiS government

Security Affairs

Poland probes Pegasus spyware abuse under the PiS government; ex-security chief Piotr Pogonowski arrested to testify before parliament. Poland’s government has been investigating the alleged misuse of Pegasus spyware by the previous administration and arrested the former head of Poland’s internal security service Piotr Pogonowski.

Spyware 117
article thumbnail

Microsoft Patch Tuesday, September 2021 Edition

Krebs on Security

Also, Apple has issued an emergency update to fix a flaw that’s reportedly been abused to install spyware on iOS products, and Google ‘s got a new version of Chrome that tackles two zero-day flaws. Finally, Adobe has released critical security updates for Acrobat , Reader and a slew of other software.

Spyware 62
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

More on NSO Group and Cytrox: Two Cyberweapons Arms Manufacturers

Schneier on Security

Citizen Lab published another report on the spyware used against two Egyptian nationals. One was hacked by NSO Group’s Pegasus spyware. The other was hacked both by Pegasus and by the spyware from another cyberweapons arms manufacturer: Cytrox. We haven’t heard a lot about Cytrox and its Predator spyware.

article thumbnail

New Android Spyware LianSpy Evades Detection Using Yandex Cloud

The Hacker News

Users in Russia have been the target of a previously undocumented Android post-compromise spyware called LianSpy since at least 2021.

Spyware 140
article thumbnail

Zero-day vulnerabilities in Chrome and Android exploited by commercial spyware

Malwarebytes

The Google Threat Analysis Group (TAG) has revealed that of the nine zero-day vulnerabilities affecting Chrome, Android, Apple and Microsoft that it reported in 2021, five were in use by a single commercial surveillance company. Citizenlab at the University of Toronto published information about Cytrox in December 2021.

Spyware 139
article thumbnail

Apple addresses a new zero-day exploited to deploy the NSO Pegasus spyware

Security Affairs

Apple confirmed that at least one of the flaws was exploited by threat actors to infect the device with the NSO Pegasus spyware. and Macs with Security Update 2021-006 Catalina. The CVE-2021-30860 flaw can be triggered to execute arbitrary code by processing a maliciously crafted PDF. Pierluigi Paganini. Pierluigi Paganini.

Spyware 145
article thumbnail

New Android spyware LianSpy relies on Yandex Cloud to avoid detection

Security Affairs

A previously unknown Android Spyware, dubbed LianSpy, has been targeting Russian users since at least 2021. In March 2024, cybersecurity researchers from Kaspersky discovered previously unknown Android spyware dubbed LianSpy. This AES key is then encrypted using a hardcoded public RSA key embedded in the spyware.

Spyware 142