Targeted ads installed Candiru spyware in zero-click attacks

Candiru spyware was installed on devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack, requiring only rendering the malicious ads. The attack exploited a vulnerability that allowed code execution without user interaction, compromising devices at the media network. Details of the exploit and affected systems remain under investigation.