Source: Pluralistic: Daily links from Cory Doctorow
An Israeli ad-tech firm weaponized Google and Facebook's ad networks to distribute commercial spyware, exploiting the trust users place in mainstream platforms to reach targets at scale. The incident collapses the distinction between legitimate adtech infrastructure and surveillance tooling. It exposes a structural vulnerability: ad networks validate ecosystem partners through technical integration before trust verification, leaving platforms open to partners who repurpose their access for intelligence operations without detection or accountability.