WhatsApp disclosed a “zero-click” spyware attack by Israeli firm Paragon, affecting nearly 100 users, including journalists. The spyware, which required no user interaction, compromised encrypted messages and could access personal data. WhatsApp has dismantled the attack, alerted victims, and collaborated with Citizen Lab for insights. Concerns about Paragon’s ethical claims and potential surveillance abuses have intensified around the spyware industry.

BadBox Malware from Google Play Hacked 50,000+ Android Devices Using 24 Apps
The Satori Threat Intelligence team of HUMAN Security has discovered an advanced malware campaign called “BADBOX 2.0” that compromised more than 50,000 Android devices, including