Výzkumníci tvrdí, že použili AI k vytvoření 0click červa, který může hacknout účty WeChat a šířit se napříč iOS a Androidem. www.nytimes.com/2026...
September 8, 2026 at 11:23 AM
Výzkumníci tvrdí, že použili AI k vytvoření 0click červa, který může hacknout účty WeChat a šířit se napříč iOS a Androidem. www.nytimes.com/2026...
Is using it to be a perfect centrist the use case though? When I’ve used it its been to comapare Canadian reporting with American or to see what “the Right” is reporting on that I haven’t seen anything about yet because I don’t want to actually follow them. (GN probs has 0click ad-leech issues tho)
August 13, 2026 at 11:09 PM
Is using it to be a perfect centrist the use case though? When I’ve used it its been to comapare Canadian reporting with American or to see what “the Right” is reporting on that I haven’t seen anything about yet because I don’t want to actually follow them. (GN probs has 0click ad-leech issues tho)
AnyPwn: AnyDesk preauth 0click RCE (heap buffer overflow)
we will release PoC post disclosure and patch
🔁 RT @v12sec | reposted by @chompie1337
https://x.com/v12sec/status/2069178874118668364
we will release PoC post disclosure and patch
🔁 RT @v12sec | reposted by @chompie1337
https://x.com/v12sec/status/2069178874118668364
June 23, 2026 at 3:57 AM
AnyPwn: AnyDesk preauth 0click RCE (heap buffer overflow)
we will release PoC post disclosure and patch
🔁 RT @v12sec | reposted by @chompie1337
https://x.com/v12sec/status/2069178874118668364
we will release PoC post disclosure and patch
🔁 RT @v12sec | reposted by @chompie1337
https://x.com/v12sec/status/2069178874118668364
# **Truffa WhatsApp con malware 0click: allarme su iPhone (iOs 16)**
@informatica
Una catena di vulnerabilità tra ImageIO e WhatsApp per iOS ha colpito iPhone fermi a iOS 16, permettendo a un attaccante di inviare richieste di bonifico dai numeri delle vittime senza lasciare tracce nelle chat […]
@informatica
Una catena di vulnerabilità tra ImageIO e WhatsApp per iOS ha colpito iPhone fermi a iOS 16, permettendo a un attaccante di inviare richieste di bonifico dai numeri delle vittime senza lasciare tracce nelle chat […]
Original post on poliverso.org
poliverso.org
May 26, 2026 at 12:44 PM
# **Truffa WhatsApp con malware 0click: allarme su iPhone (iOs 16)**
@informatica
Una catena di vulnerabilità tra ImageIO e WhatsApp per iOS ha colpito iPhone fermi a iOS 16, permettendo a un attaccante di inviare richieste di bonifico dai numeri delle vittime senza lasciare tracce nelle chat […]
@informatica
Una catena di vulnerabilità tra ImageIO e WhatsApp per iOS ha colpito iPhone fermi a iOS 16, permettendo a un attaccante di inviare richieste di bonifico dai numeri delle vittime senza lasciare tracce nelle chat […]
Whatsapp compromesso su iPhone, la ricerca di Forenser sullo 0-click
il blog: insicurezzadigitale.com/whatsapp-com...
#cybersecurity #0click #infosec #malware #whatsapp #zeroclick
il blog: insicurezzadigitale.com/whatsapp-com...
#cybersecurity #0click #infosec #malware #whatsapp #zeroclick
Whatsapp compromesso su iPhone, la ricerca di Forenser sullo 0-click - (in)sicurezza digitale
Una premessa prima di iniziare: se hai un iPhone con iOS inferiore a 16.7.12, aggiorna, è già tardi e un miracolo che non sia ancora successo niente di
insicurezzadigitale.com
May 24, 2026 at 9:11 AM
Whatsapp compromesso su iPhone, la ricerca di Forenser sullo 0-click
il blog: insicurezzadigitale.com/whatsapp-com...
#cybersecurity #0click #infosec #malware #whatsapp #zeroclick
il blog: insicurezzadigitale.com/whatsapp-com...
#cybersecurity #0click #infosec #malware #whatsapp #zeroclick
Windows sotto attacco 0-click: la falla che aggira SmartScreen
Una falla nella shell di Windows consente a file LNK malevoli di sottrarre i dati relativi alle credenziali degli ute...
https://www.ilsoftware.it/attacco-windows-smartscreen-falla-0click/
Una falla nella shell di Windows consente a file LNK malevoli di sottrarre i dati relativi alle credenziali degli ute...
https://www.ilsoftware.it/attacco-windows-smartscreen-falla-0click/
April 30, 2026 at 2:00 PM
Windows sotto attacco 0-click: la falla che aggira SmartScreen
Una falla nella shell di Windows consente a file LNK malevoli di sottrarre i dati relativi alle credenziali degli ute...
https://www.ilsoftware.it/attacco-windows-smartscreen-falla-0click/
Una falla nella shell di Windows consente a file LNK malevoli di sottrarre i dati relativi alle credenziali degli ute...
https://www.ilsoftware.it/attacco-windows-smartscreen-falla-0click/
“ #ShadowPrompt” : désormais comblée, retour sur la vulnérabilité #0click qui impactait l'extension #Claude pour Google #Chrome !
blog.sosordi.net/2026/03/shad...
#securite #data #vieprivee #Internet #miseAjour #ArkoseLabs #IA
blog.sosordi.net/2026/03/shad...
#securite #data #vieprivee #Internet #miseAjour #ArkoseLabs #IA
March 31, 2026 at 2:06 PM
“ #ShadowPrompt” : désormais comblée, retour sur la vulnérabilité #0click qui impactait l'extension #Claude pour Google #Chrome !
blog.sosordi.net/2026/03/shad...
#securite #data #vieprivee #Internet #miseAjour #ArkoseLabs #IA
blog.sosordi.net/2026/03/shad...
#securite #data #vieprivee #Internet #miseAjour #ArkoseLabs #IA
It's like how steam scans all their games, yet somehow like 7 games that were blatant stealer malware made it through. Now, its possible the deets come out and its not actually that easy, but IDK about any of my apps that have claimed 0Click-RCE that the devs won't fix because "scanning"
March 29, 2026 at 5:11 PM
It's like how steam scans all their games, yet somehow like 7 games that were blatant stealer malware made it through. Now, its possible the deets come out and its not actually that easy, but IDK about any of my apps that have claimed 0Click-RCE that the devs won't fix because "scanning"
Zenity's CTO told Cursor it was playing a treasure hunt and asked it to find 'apples' shaped like secrets. it worked, full RCE. also hijacked ChatGPT with just an email, stole Google Drive data without a click https://zenity.io/research/agentflayer-vulnerabilities
AI Agent Security | AgentFlayer: The 0Click Threat to AI Assistants & Agents | Zenity
Zenity empowers enterprises to enable AI Agents securely. Our platform ensures adaptive security and governance from buildtime to runtime.
zenity.io
March 29, 2026 at 4:19 AM
Zenity's CTO told Cursor it was playing a treasure hunt and asked it to find 'apples' shaped like secrets. it worked, full RCE. also hijacked ChatGPT with just an email, stole Google Drive data without a click https://zenity.io/research/agentflayer-vulnerabilities
How can those prices make sense when you can just vibe code your own Android full chain RCE 0click instead of exclusive ones that will send you to jail.
🔁 RT @msuiche | reposted by @HackingLZ
https://x.com/msuiche/status/2026649607086673935
🔁 RT @msuiche | reposted by @HackingLZ
https://x.com/msuiche/status/2026649607086673935
February 25, 2026 at 10:32 PM
How can those prices make sense when you can just vibe code your own Android full chain RCE 0click instead of exclusive ones that will send you to jail.
🔁 RT @msuiche | reposted by @HackingLZ
https://x.com/msuiche/status/2026649607086673935
🔁 RT @msuiche | reposted by @HackingLZ
https://x.com/msuiche/status/2026649607086673935
Black Hat USA 2025 | AI Enterprise Compromise - 0click Exploit Methods
YouTube video by Black Hat
www.youtube.com
February 22, 2026 at 10:30 PM
Hacked in Pakistan: Israeli spyware firm Intellexa still active amid U.S. sanctions. New victims of Predator spyware identified, with secretive 0click Ad-based infections.
Bombshell expose by Omer Benjakob, Eliza Triantafillou, Lorenz Naegeli, Donncha Ó Cearbhaill
www.haaretz.com/israel-news/...
Bombshell expose by Omer Benjakob, Eliza Triantafillou, Lorenz Naegeli, Donncha Ó Cearbhaill
www.haaretz.com/israel-news/...
Israeli Spyware firm Intellexa, owned by ex-intel officer, still active amid US sanctions
New Victims of Predator Spyware Identified, With Malicious TikTok Links Revealing New Targets, and Evidence Shows Egypt and Saudi Clients Still Active. Ad-based Infections Confirmed. Leaked Files and ...
www.haaretz.com
December 4, 2025 at 8:32 AM
Hacked in Pakistan: Israeli spyware firm Intellexa still active amid U.S. sanctions. New victims of Predator spyware identified, with secretive 0click Ad-based infections.
Bombshell expose by Omer Benjakob, Eliza Triantafillou, Lorenz Naegeli, Donncha Ó Cearbhaill
www.haaretz.com/israel-news/...
Bombshell expose by Omer Benjakob, Eliza Triantafillou, Lorenz Naegeli, Donncha Ó Cearbhaill
www.haaretz.com/israel-news/...
I have talked to an IT admin turned security Principal, who had a 0click 0day deployed on their network. I know the case and CVE, it is real.
What saved them was the attacker encountering a configuration they had just NO idea what to do with.
Attackers are not gods, even if they have the commands.
What saved them was the attacker encountering a configuration they had just NO idea what to do with.
Attackers are not gods, even if they have the commands.
I tell the story often but in the beginnings of my career in IT I was fascinated by stories of 0days by state actors. And I worried about them.
As our entire client base was XP SP2 with zero governance and many machines shared huge groups of local admins.
Perspective later is hell of a thing.
As our entire client base was XP SP2 with zero governance and many machines shared huge groups of local admins.
Perspective later is hell of a thing.
November 19, 2025 at 5:41 AM
I have talked to an IT admin turned security Principal, who had a 0click 0day deployed on their network. I know the case and CVE, it is real.
What saved them was the attacker encountering a configuration they had just NO idea what to do with.
Attackers are not gods, even if they have the commands.
What saved them was the attacker encountering a configuration they had just NO idea what to do with.
Attackers are not gods, even if they have the commands.
As I understand this: show up with a 0click in a messaging app, cool. Show up with a break in Signal’s PQC implementation, that gets fixed.
It’s actually excellent policy. But allegedly new policy.
It’s actually excellent policy. But allegedly new policy.
November 15, 2025 at 6:07 PM
As I understand this: show up with a 0click in a messaging app, cool. Show up with a break in Signal’s PQC implementation, that gets fixed.
It’s actually excellent policy. But allegedly new policy.
It’s actually excellent policy. But allegedly new policy.
Good questions. I'm not aware of any active 0click on a major blockchain.
But it's within the realm of speculatively possible, assuming work, on various blockchains / smart contracts.
Also speculative re BTC: maybe via leveraging vulnerabilities in systems/libraries that parse OP RETURN etc..
But it's within the realm of speculatively possible, assuming work, on various blockchains / smart contracts.
Also speculative re BTC: maybe via leveraging vulnerabilities in systems/libraries that parse OP RETURN etc..
October 19, 2025 at 11:40 AM
Good questions. I'm not aware of any active 0click on a major blockchain.
But it's within the realm of speculatively possible, assuming work, on various blockchains / smart contracts.
Also speculative re BTC: maybe via leveraging vulnerabilities in systems/libraries that parse OP RETURN etc..
But it's within the realm of speculatively possible, assuming work, on various blockchains / smart contracts.
Also speculative re BTC: maybe via leveraging vulnerabilities in systems/libraries that parse OP RETURN etc..
2006-born person with a “neocities”: I miss macromedia flash :(
1980-born person who still drives a 1993 accord and bought a house in 2009 with a suitcase of cash earned by selling 0click flash 0days to bidders who then distributed them through ad networks: me too friend, me too :(
1980-born person who still drives a 1993 accord and bought a house in 2009 with a suitcase of cash earned by selling 0click flash 0days to bidders who then distributed them through ad networks: me too friend, me too :(
October 12, 2025 at 2:53 PM
2006-born person with a “neocities”: I miss macromedia flash :(
1980-born person who still drives a 1993 accord and bought a house in 2009 with a suitcase of cash earned by selling 0click flash 0days to bidders who then distributed them through ad networks: me too friend, me too :(
1980-born person who still drives a 1993 accord and bought a house in 2009 with a suitcase of cash earned by selling 0click flash 0days to bidders who then distributed them through ad networks: me too friend, me too :(
The latest update for #Zenity includes "Zenity Joins the Microsoft Security Store: Securing #AI Agents Everywhere, Together" and "0Click Attacks: When TTPs Resurface Across Platforms".
#potatosecurity #lowcodesecurity #appsec https://opsmtrs.com/3GN6TxH
#potatosecurity #lowcodesecurity #appsec https://opsmtrs.com/3GN6TxH
October 3, 2025 at 2:34 AM
The latest update for #Zenity includes "Zenity Joins the Microsoft Security Store: Securing #AI Agents Everywhere, Together" and "0Click Attacks: When TTPs Resurface Across Platforms".
#potatosecurity #lowcodesecurity #appsec https://opsmtrs.com/3GN6TxH
#potatosecurity #lowcodesecurity #appsec https://opsmtrs.com/3GN6TxH
The latest update for #Zenity includes "Zenity Joins the Microsoft Security Store: Securing #AI Agents Everywhere, Together" and "0Click Attacks: When TTPs Resurface Across Platforms".
#cybersecurity #lowcodesecurity #appsec https://opsmtrs.com/3GN6TxH
#cybersecurity #lowcodesecurity #appsec https://opsmtrs.com/3GN6TxH
Zenity
Design and implement governance policies, identify security risks, detect emerging threats and drive automatic mitigation and response.
opsmtrs.com
October 3, 2025 at 2:22 AM
The latest update for #Zenity includes "Zenity Joins the Microsoft Security Store: Securing #AI Agents Everywhere, Together" and "0Click Attacks: When TTPs Resurface Across Platforms".
#cybersecurity #lowcodesecurity #appsec https://opsmtrs.com/3GN6TxH
#cybersecurity #lowcodesecurity #appsec https://opsmtrs.com/3GN6TxH
The latest update for #Zenity includes "0Click Attacks: When TTPs Resurface Across Platforms" and "Zenity and Slalom Partner to Accelerate Secure AI Agent Adoption".
#cybersecurity #lowcodesecurity #appsec https://opsmtrs.com/3GN6TxH
#cybersecurity #lowcodesecurity #appsec https://opsmtrs.com/3GN6TxH
Zenity
Design and implement governance policies, identify security risks, detect emerging threats and drive automatic mitigation and response.
opsmtrs.com
September 30, 2025 at 4:28 AM
The latest update for #Zenity includes "0Click Attacks: When TTPs Resurface Across Platforms" and "Zenity and Slalom Partner to Accelerate Secure AI Agent Adoption".
#cybersecurity #lowcodesecurity #appsec https://opsmtrs.com/3GN6TxH
#cybersecurity #lowcodesecurity #appsec https://opsmtrs.com/3GN6TxH
Arriva ShadowLeak: un bug 0click in ChatGPT porta all’esfiltrazione dei dati sensibili
📌 Link all'articolo : www.redhotcyber.com/post/arr...
#redhotcyber #hacking #cti #ai #online #it #cybercrime #cybersecurity #technology #news #cyberthreatintelligence #innovation #privacy
📌 Link all'articolo : www.redhotcyber.com/post/arr...
#redhotcyber #hacking #cti #ai #online #it #cybercrime #cybersecurity #technology #news #cyberthreatintelligence #innovation #privacy
September 19, 2025 at 5:34 AM
Arriva ShadowLeak: un bug 0click in ChatGPT porta all’esfiltrazione dei dati sensibili
📌 Link all'articolo : www.redhotcyber.com/post/arr...
#redhotcyber #hacking #cti #ai #online #it #cybercrime #cybersecurity #technology #news #cyberthreatintelligence #innovation #privacy
📌 Link all'articolo : www.redhotcyber.com/post/arr...
#redhotcyber #hacking #cti #ai #online #it #cybercrime #cybersecurity #technology #news #cyberthreatintelligence #innovation #privacy
August 23, 2025
August 23, 2025
August 23, 2025 Brief info and POC for this week's Apple 0click iOS 18.6.1 RCE bug CVE-2025-43300 https://t.co/EL3qg56N8X pic.twitter.com/j8yuv1CXU7—...
buttondown.com
August 23, 2025 at 1:43 PM
August 23, 2025