CuraSec

Learn active

Russian hackers use n-day zero-click exploits in mobile watering hole campaign

2026-11-04 18:40 UTC · BleepingComputer · read the source ↗ #watering-hole#mobile-security#zero-click
  • Engineer — Skip
  • SOC/IR — Learn: Zero-click watering hole delivery via n-day exploits on iOS/Android is a technique pattern worth tracking, but the summary provides no IOCs, specific CVE identifiers, or ATT&CK-mappable TTPs to act on today.
  • Leader — Learn: A Russian-linked large-scale mobile targeting campaign is worth flagging in the context of executive device security posture, but no sector attribution or specific organizational exposure is established — monitor for follow-on reporting with more detail.
This entry was curated and judged by AI (Claude) with automated enrichment (CISA KEV / EPSS / public PoC). Verify against the original source before acting. Found a bad verdict? Report it — confirmed errors go to the corrections log.