MEDIUMVulnerability
Global

Apple notifications alert victims in 99 countries about mercenary spyware infections

·Source: CyberScoop

Updated:

Executive Summary

The notifications come shortly before the Pall Mall Process is nearing final negotiations on guidelines for the use of commercial hacking tools. The post Apple notifications alert victims in 99 countries about mercenary spyware infections appeared first on CyberScoop .

Analysis

The notifications come shortly before the Pall Mall Process is nearing final negotiations on guidelines for the use of commercial hacking tools. The post Apple notifications alert victims in 99 countries about mercenary spyware infections appeared first on CyberScoop .
Source Attribution

Originally published by CyberScoop on Oct 30, 2026.

Related Threats

LOWVulnerability

CVE-2026-119117 - Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java

<p><b>Bulletin ID:</b> 2026-159-AWS<br> <b>Publication Date:</b> 10/30/2026 11:00 AM PDT</p> <p><b>Description:</b></p> <p>We published CVE-2026-119117. Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library's logger is configured at DEBUG log level, might allow local users to obtain the AWS credentials that the library resolve

CVE-2026-119117
AWS Security Bulletins
MEDIUMVulnerability

PE firm CD&amp;R targets buyout of $40bn Global Payments - FT

Global Payments, the payments processor with an enterprise value of around $40 billion, is an acquisition target for private equity firm CD&R, according to the Financial Times.

Finextra
CRITICALVulnerability

NVD CRITICAL: CVE-2026-119706 — InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code e...

InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution vulnerability that allows remote attackers to run OS commands by sending pickled data to the /update_weights endpoint. Attackers can submit a base64-encoded crafted pickle in serialized_named_tensors, which ForkingPickler.loads deserializes without validation, executing commands as the api_server process.

CVE-2026-119706
NIST NVD