# N-day Published articles for N-day. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Russian hackers target iOS and Android users with n-day exploits DevFeed: [Russian hackers target iOS and Android users with n-day exploits]() Original publisher: [Read original article]() Author: Sinisa Markovic Published: 2026-11-04T14:38:37Z Content type: news Language: en Sources: [Help Net Security]() Topics: [Cloaked Ursa](), [Android Security](), [Android](), [iOS](), [Google Chrome]() Tags: [adversary](), [adversary-in-the-middle](), [android](), [android-phones](), [apt29](), [chrome](), [code-injection](), [compromised-websites](), [cookies](), [cyber-espionage](), [exploits](), [hackers](), [ios](), [iphone](), [mobile-devices](), [n-day](), [news](), [passwords](), [patched](), [russia](), [russian-federation](), [watering-hole](), [websites](), [wi-fi]() ### AI overview Sekoia reports that APT29-linked watering holes used three web delivery routes--scripts injected into compromised sites, lookalike domains and a hijacked Ukrainian analytics service--to profile visitors and serve platform-specific exploits without user interaction. The chains targeted iOS 16.7 and 18.5 and Android phones running Chrome 139-145 except 143, stealing data that ranged from browser cookies to messages, passwords, location and health information. The payloads did not persist after exfiltration. The vulnerabilities were patched before the operation began; Sekoia says devices with up-to-date operating systems are safe. Attribution is based on infrastructure traces, campaign similarities and the victim list, and the attackers' targeting intent remains unclear. ### Source excerpt Russia's APT29 has been using compromised websites, lookalike domains and a hijacked web analytics service to target iOS and Android users with exploits for patched flaws and steal their cookies, messages and Wi-Fi passwords, according to Sekoia. APT29 watering holes target mobile devices with n-day exploits (Source: Sekoia) The company's Threat Detection & Research (TDR) team spotted the operation in mid-October 2026. "This watering hole campaign, which we assess with moderate to high confidence to ... More -> The post Russian hackers target iOS and Android users with n-day exploits appeared first on Help Net Security. ## Hackers use n-day exploits in zero-click attacks on iOS, Android devices DevFeed: [Hackers use n-day exploits in zero-click attacks on iOS, Android devices]() Original publisher: [Read original article]() Author: Bill Toulas Published: 2026-11-04T09:39:54Z Content type: news Language: en Sources: [BleepingComputer]() Topics: [Cybersecurity](), [Android Security](), [Credential theft](), [Android](), [iOS]() Tags: [ai](), [ai-agents](), [android](), [apple](), [apt29](), [attacks](), [c2](), [chrome](), [command-and-control](), [computer-help](), [computer-security](), [computers](), [cookies](), [credentials](), [cve](), [darksword](), [devices](), [exploits](), [hackers](), [infosec](), [infosec-computer-security](), [ios](), [iphone](), [linux](), [mac](), [malware](), [malware-removal](), [mobile](), [n-day](), [russia](), [security](), [spyware](), [support](), [tech-support](), [technical-support](), [virus](), [virus-removal](), [watering-hole](), [windows](), [zero-click]() ### AI overview Sekoia attributes a large watering-hole campaign to APT29 with moderate-to-high confidence. Compromised sites and lookalike portals used JavaScript to profile visitors' devices and browser versions, then served platform-specific exploit chains without user interaction. The reported chains targeted older iOS versions to steal Safari cookies or harvest messaging databases, credentials, location data, and photos; Android Chrome versions 139-145 except 143 were targeted to collect cookies, login data, browsing history, and saved Wi-Fi credentials. The analyzed payloads did not establish persistence, so rebooting stopped activity until the device revisited a compromised site. Apple and Google have patched the flaws; the excerpt recommends installing the latest available security updates. ### Source excerpt A large-scale watering hole attack associated with Russian hackers has been targeting iOS and Android users visiting compromised sites or fake ones impersonating legitimate portals. [...] ## Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth DevFeed: [Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth]() Original publisher: [Read original article]() Author: Bill Toulas Published: 2026-10-15T18:20:59Z Content type: news Language: en Sources: [BleepingComputer]() Topics: [residential proxy network]() Tags: [computer-help](), [computer-security](), [computers](), [greynoise](), [hijack](), [infosec](), [infosec-computer-security](), [linux](), [mac](), [malware](), [malware-removal](), [n-day](), [nas](), [proxy](), [proxyjacking](), [security](), [spyware](), [support](), [tech-support](), [technical-support](), [virus](), [virus-removal](), [windows]() ### AI overview GreyNoise identified at least 143 compromised devices in a proxyjacking campaign spanning 34 countries. The attacker exploited vulnerabilities to install Pawns.app without owners' consent and monetize their internet connections through a residential proxy network. ### Source excerpt A proxyjacking campaign has impacted devices in 34 countries, monetizing victims' internet connections through a commercial residential proxy network. [...]