BreachFeed
← All incidents
companyAl Jazeera
suspectedlowIncidentFirst reported Oct 15, 2026

Al Jazeera: zero-click Candiru spyware infections delivered via online ads

Citizen Lab researchers said devices at news network Al Jazeera were infected with Candiru spyware through ordinary online advertisements, requiring no user interaction. The attack code executed as soon as an ad loaded, in some cases while loading invisibly in the background.

Members only

The full record: the timeline and 4 linked reports

  • Every update as it happened, with the status at each step
  • Every report behind the record, newest first
  • Alerts the moment Al Jazeera — or anything else you track — is hit again

A free account is all it takes — no card, one minute.

Al Jazeera: zero-click Candiru spyware infections delivered via online ads · BreachFeed