APT29 built three exploit chains. Every bug was already in the catalogue
2026-11-05Security
Sekoia found a Russian watering hole campaign serving iOS and Android exploit chains. All ten vulnerabilities it used are in the federal catalogue of exploited flaws, and nine were listed before the research was published.