AdFection: How Targeted Ads Delivered Zero-Click Candiru Spyware
AdFection used targeted ads from Discover-Tech to profile devices and deliver Candiru spyware with no click. What happened, the IOCs, and how to defend.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
AdFection used targeted ads from Discover-Tech to profile devices and deliver Candiru spyware with no click. What happened, the IOCs, and how to defend.
The Beer-Lambert law, A = εlc, links absorbance to concentration. Terms, history, worked lab examples and how pulse oximeters use two wavelengths.
ANP gives AI agents web hosted DID identities, signed HTTP requests and optional protocol negotiation. How did:wba works, what is draft, and the risks.
The Stefan-Boltzmann law: radiated power is e σ A T⁴. Worked examples for the Sun, Earth's energy balance, a person and a thermal camera's emissivity.
Privacy Pass lets a device prove it passed a check without saying who it is. How RFCs 9576 to 9578 work, where tokens replace CAPTCHAs, and their limits.
ACP is the open Stripe and OpenAI standard for agent checkout: five checkout endpoints, single use payment tokens, signed requests, and the risks.
Security Insights is an OpenSSF YAML file where projects self-report security contacts, policies, releases and tools. Here is the v2 schema and its uses.
Run one open source OIDC identity provider, sign apps in with the code flow and PKCE, gate apps without logins at the proxy, and make passkeys the MFA.
Boot Guard and Platform Secure Boot check firmware in hardware before UEFI runs, using an OEM key fused into the chip. How they work and how to check yours.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.