Spyware infects journalists through unclicked ads, Palo Alto firewall zero-day exploited, OpenAI engineer charged with bugging exec room

Zero-Click Spyware Ads, Palo Alto Firewall Zero-Day, Critical Drupal Flaw, and OpenAI Bugging Charge

Cybersecurity Today Host David Shipley reports on Citizen Lab findings that Israeli spyware maker Candiru, now reportedly rebranded as Integrity Labs, used targeted online ads bought through DiscoverTech's Controlium platform to profile and, in some cases, zero-click infect Al Jazeera journalists' devices, with ad-bid records showing broad reach across nearly 200,000 sites and apps and extensive profiling of sensitive networks; Google and IAB Europe have cut off DiscoverTech.

The episode also covers active exploitation of Palo Alto Networks PAN-OS management interface zero-day CVE-2026-0322, the company's patches and mitigation guidance, and CISA adding it to the KEV catalog. The show details Drupal's critical Field UI RCE flaw CVE-2026-1080-97, noting many sites run unsupported branches with no fix.

Finally, we cover charges that an OpenAI engineer planted encrypted recording devices in an executive conference room.

00:00 Top Stories Preview

00:27 Zero Click Spyware Ads

02:08 Ad Industry Fallout

03:09 Palo Alto Firewall Zero Day

04:17 How to Patch and Mitigate

05:13 Drupal Critical RCE Risk

06:35 No Fix for Many Sites

07:26 OpenAI Meeting Room Bugging