
01
Citizen Lab says governments are abusing online ads to hack people with ‘zero-click’ spyware
The gist: Citizen Lab says online ads were used to deliver zero-click spyware, including attacks that hacked at least 45 Al Jazeera computers without victims clicking anything.
Big pictureAdvertising systems can reach huge numbers of devices and are built to target particular users, organizations, and equipment. Using them to deliver government-backed spyware turns a familiar part of the internet into a possible surveillance tool, although researchers could not confirm that every exposed device was infected.
Explain like I'm 5An online ad can be like a booby-trapped flyer: just seeing it may give a spy a way into your device. The spyware can then secretly take information without you opening a message or pressing a link.
Why it matters nowCitizen Lab published new research Thursday documenting what it calls the first confirmed zero-click government spyware attacks delivered through online ads. The report also revealed exposed login records and billions of ad-bidding records from March through June 2026.
Three things to know01The ads targeted specific devices
Discover-Tech's Controlium platform appeared designed to place malicious content alongside ads shown to individual users or devices.
02The exposure reached sensitive networks
Records showed ads appearing on devices used by militaries, governments, critical infrastructure, and national cyber agencies, though infection was not established.
03The platform leaked valuable data
Researchers said exposed website code let them recreate a control panel, while a public area also revealed dashboard login records linked to Candiru and Bindecy employees.
Trusted source
TechCrunch ↗

02
'What appears to be a simple scam message is often the visible end of a much larger transnational cybercriminal operation': Microsoft leads global takedown of phishing network which sent over a billion messages
The gist: Microsoft and partners disrupted a cybercrime marketplace that enabled more than a billion phishing messages targeting 75,000 organizations worldwide.
Big pictureThe operation shows that phishing is often supplied by organized businesses, not just individual scammers working alone. Taking away their shared tools and infrastructure can slow attacks across many countries, though similar services may eventually return.
Explain like I'm 5Criminals bought ready-made fake websites, messages, and stolen accounts from an online shop. It was like a scam kit that let many people pretend to be trusted companies and trick others.
Why it matters nowMicrosoft, cybersecurity groups, and Japanese and U.S. authorities have seized the marketplace's domains, disabled more than 20,000 connected accounts, and blocked over 100,000 fraud-related domains.
Three things to know01Iron Man widened the reach
Its library contained more than 2,300 templates impersonating banks, retailers, healthcare providers, police departments, and other organizations across more than 150 countries.
02Japan helped expose the network
The investigation began after Japan's National Police Agency reported fraud activity aimed at people and businesses there, leading researchers to the wider Chinese-language marketplace.
03The takedown has limits
Microsoft said the operators made tens of millions of dollars, and the article notes that without arrests the marketplace or similar services could reappear.
Trusted source
TechRadar ↗

03
Amazon’s Bee launches two new personal AI devices, starting at $75
The gist: Amazon-owned Bee launched two personal AI devices that turn conversations into notes and tasks, starting with the $74.99 Bee Frontier.
Big pictureThe devices bring AI note-taking into everyday activities such as meetings, classes, medical visits, and personal plans. Bee is also tying these tools to Amazon, Alexa, email, calendars, and other apps so recorded information can lead to actions.
Explain like I'm 5Bee is like a tiny helper that listens to a conversation and remembers the important parts. It can turn those parts into reminders, calendar events, or short summaries.
Why it matters nowBee announced the devices as its first new products since Amazon acquired the company last year. The Frontier is available now, while the Eclipse is expected soon.
Three things to know01Subscriptions unlock deeper help
Free users get conversation summaries and 14 days of memory, while the $11.99-a-month Bee Pro plan adds unlimited summaries, suggested to-dos, app connections, and a chat assistant.
02Raw audio is deleted
Bee processes conversations in real time and deletes the audio, while encrypted transcripts are controlled by keys created by the user’s device.
03Frontier lasts seven days
The wrist-or-clothing device includes dual microphones, noise filtering, USB-C charging, and IP67 water resistance, with up to seven days of battery life.
Trusted source
TechCrunch ↗