Russian-linked hackers exploit routine iOS and Android browsing
BleepingComputer reports a large-scale Russian-linked watering-hole campaign using eight known flaws to target iOS and Android users who visit compromised websites or lookalike portals.
The attackers use n-day exploits—flaws already disclosed publicly. A site serves a page that triggers a browser or device flaw, so simply visiting can start an attack; users need not open an attachment, install an app, or tap a download.
For organizations whose users visit these portals, exposure can follow the person rather than a company-managed phone. The report does not identify affected software versions or establish what attackers can do after the initial exploit, leaving both fleet exposure and downstream impact unclear.
1 source · 2h ago
CVEs in this update
8 CVEs
Across Chrome, safari, ipados, and related packages.
Hackers use n-day exploits in zero-click attacks on iOS, Android devices
A large-scale watering hole attack associated with Russian hackers has been targeting iOS and Android users visiting compromised sites or fake ones impersonating legitimate portals.