{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3oqualcommsm6475_firmware-/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":["APT29","Cozy Bear","NOBELIUM","UNC2452","Midnight Blizzard","The Dukes"],"_cs_cpes":["cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*","cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*","cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*","cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*","cpe:2.3:a:wpewebkit:wpe_webkit:*:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*","cpe:2.3:o:apple:ipados:26.0:*:*:*:*:*:*:*","cpe:2.3:o:apple:iphone_os:26.0:*:*:*:*:*:*:*","cpe:2.3:o:apple:macos:26.0:*:*:*:*:*:*:*","cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","cpe:2.3:o:qualcomm:ar8031_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:qualcomm:csra6620_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:qualcomm:csra6640_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:qualcomm:qca2066_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:qualcomm:qcm6125_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:qualcomm:qcm8550_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:qualcomm:qcn9011_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:qualcomm:qcn9012_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:qualcomm:qcs6125_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:qualcomm:qcs8550_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:qualcomm:video_collaboration_vc1_platform_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:qualcomm:sm6475_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:qualcomm:sm6650_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:qualcomm:sm6650p_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:qualcomm:sm7435_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:qualcomm:sm7635_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:qualcomm:sm7635p_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:qualcomm:smart_audio_400_platform_firmware:-:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2025-43529"},{"cvss":5.5,"id":"CVE-2024-27834"},{"cvss":5.5,"id":"CVE-2025-43520"},{"cvss":8.8,"id":"CVE-2026-3910"},{"cvss":7.5,"id":"CVE-2025-27038"}],"_cs_exploited":true,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["iOS (\u003c= 18.5)","Chrome for Android (139 to 145, excluding 143)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"threat","_cs_vendors":["Apple","Google"],"content_html":"\u003cp\u003eThe cybersecurity firm Sekoia reports that the Russian state-sponsored threat actor Midnight Blizzard (APT29) has targeted iOS and Android users in the US and Europe through a large-scale watering hole campaign.\u003c/p\u003e\n\u003cp\u003eThe campaign involves compromising or cloning high-profile websites to deliver malicious JavaScript that fingerprints visitors. In some instances, the actor utilized adversary-in-the-middle (AiTM) setups with lookalike domains to target high-profile organizations. The campaign relies on n-day exploit chains - utilizing the DarkSword exploit kit for iOS and targeting previously patched vulnerabilities for Android - to exfiltrate device data.\u003c/p\u003e\n","date_modified":"2026-11-05T21:31:46Z","date_published":"2026-11-05T11:40:45Z","id":"https://feed.craftedsignal.io/briefs/2026-11-midnight-blizzard-mobile-watering-hole/","summary":"Russian state-sponsored actor Midnight Blizzard (APT29) is leveraging watering holes and lookalike domains to deliver n-day exploit chains against mobile devices.","title":"Midnight Blizzard: Mobile watering hole campaign targeting iOS and Android","url":"https://feed.craftedsignal.io/briefs/2026-11-midnight-blizzard-mobile-watering-hole/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:o:qualcomm:sm6475_firmware:-:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}