Verified65% confidenceFactExact time
Both vulnerabilities are of the zero-click attack type, meaning attackers can execute arbitrary code in the user's running environment and steal sensitive credentials such as API keys without the victim clicking any link or downloading any file.
3
Sources
65%
Confidence
Long-term
Relevance
8/18/2026
First Seen
Sources
Related Claims
UnverifiedZero-click attacks bypass the security advice of not clicking suspicious links, and protection depends entirely on vulnerability fixes at the endpoint and browser levels.79% similarUnverifiedTraditional zero-click attacks mostly rely on unpatched remote code execution vulnerabilities in the operating system or browser (such as iMessage's FORCEDENTRY), whereas AdFection does not rely on a specific CVE and instead abuses browser API behaviors permitted by the advertising standard itself.74% similarUnverifiedZero-click attacks typically combine multiple stages: a parsing vulnerability in a rendering engine, a system-level privilege escalation vulnerability, and a silent installation mechanism used for persistence.72% similarUnverified零信任架构能有效遏制攻击者入侵后的横向移动，这是勒索软件蔓延至全网并加密大量数据的关键步骤71% similarUnverifiedZero-click spyware usually targets specific groups such as journalists, activists, and corporate and government executives, and attackers pursue long-term persistence and data theft rather than ransomware monetization.70% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/769909API
curl https://kongchang.com/api/v1/knowledge/claims/769909MCP
get_claim(id=769909)