Making Tech Headlines · Page 1

Zero-Click Phone Attacks Finally Make Doing Nothing a Security Decision

November 4, 2026 at 6:01 AM EST · New York time

A large-scale campaign associated with Russian hackers has targeted iOS and Android users through compromised websites and fake sites impersonating legitimate portals. The attacks use n-day exploits, which take advantage of vulnerabilities that are already known, and include zero-click techniques that require no additional interaction from a victim. Simply visiting a compromised page can expose a vulnerable device. That makes the campaign an awkward fit for the usual advice to avoid suspicious links and attachments. A person can exercise care and still encounter a compromised site, while a convincing imitation portal can make the wrong destination look familiar. Known vulnerabilities also make software versions important: an exploit aimed at an older version does not necessarily work against a device that has received the relevant fix. Keeping a phone and its browser updated is a sensible way to reduce exposure to known security gaps. Checking an address before entering a familiar service can help with impersonation, although it cannot guarantee that a legitimate site has not been compromised. The campaign turns the great promise of frictionless browsing into a rather less reassuring slogan: no taps, no forms, no waiting. Unfortunately, the people offering that convenience are not the phone makers.

Satire. Not factual reporting. Read the original reporting from the linked publishers.