Oct 15, 2026 · 11 min
Spyware reaches journalists through ads users never click
Spyware infects journalists through unclicked ads, Palo Alto firewall zero-day exploited, OpenAI engineer charged with bugging exec room
The episode connects zero-click surveillance, actively exploited software flaws, and alleged insider bugging to a broader erosion of digital security.
- 1Candiru reportedly used targeted advertising to profile and potentially infect Al Jazeera journalists without requiring an ad click.
- 2Attackers are actively exploiting a Palo Alto Networks PAN-OS zero-day, while a critical Drupal flaw threatens unsupported sites.
- 3An OpenAI engineer faces charges alleging he planted encrypted recording devices in an executive meeting room.
Don't miss
The episode’s sharpest warning is that targeted advertising could profile and potentially infect journalists without any ad click.
The brief
David Shipley opens with a cluster of cybersecurity stories, linking firewall exploitation, a critical Drupal vulnerability, spyware delivered through advertising, and alleged bugging at OpenAI.
Citizen Lab reported that Candiru, reportedly rebranded as Integrity Labs, used targeted online ads to profile and potentially infect Al Jazeera journalists without a click.
The episode places that campaign alongside active exploitation of a Palo Alto Networks PAN-OS zero-day and a critical Drupal Field UI remote-code-execution flaw affecting unsupported sites.
The final story shifts from remote compromise to alleged insider surveillance: OpenAI engineer Abdulrahman Alfozan was charged with planting encrypted recording devices in an executive meeting room.
Together, the stories show how exposure can enter through advertising systems, neglected software, network appliances, or trusted workplaces.