Скачать или смотреть Zero-Click Attacks: How You Can Be Hacked Without A Click

Imagine that your phone gets hacked without you clicking anything. Zero-click attacks are one of the scariest threats today. In this video, I break down how zero-click works, explore historic cases like Stagefright and Pegasus, reveal the new risk of AI-powered attacks like EchoLeak, and share defense strategies you can implement.

Research URLs:
-----------------
• IBM explainer video (inspiration):    • Zero-Click Attacks: AI Agents and the Next...   (YouTube)
• Stagefright (background): https://en.wikipedia.org/wiki/Stagefr...) (Wikipedia)
• NVD CVE details (Stagefright examples): https://nvd.nist.gov/vuln/detail/CVE-... (NVD)
• Pegasus reporting & forensic methodology (Amnesty/Citizen Lab): https://www.amnesty.org/en/latest/res... (Amnesty International)
• EchoLeak disclosure (Aim Security / ArXiv): https://arxiv.org/html/2509.10540v1 and Aim Labs writeup: https://www.aim.security/post/echolea... (arXiv)
• Trend Micro analysis of EchoLeak: https://www.trendmicro.com/en_us/rese... (www.trendmicro.com)
• Zero-click explainer (CheckPoint): https://www.checkpoint.com/cyber-hub/... (Check Point Software)

William Heldman website: www.williamheldman.net
Facebook: @DrHeldmanTTE
00:00 Introduction
01:29 Intro
02:00 Agenda
02:16 What is a Zero-Click Attack?
04:30 Stagefright: An Example from History
06:24 Pegasus (NSO Group) Spyware
08:21 Echoleak and AI
10:04 Zero-Click Amplifier
11:23 Deeper Information 1
13:32 Deeper Information 2
14:49 Deeper Information 3
16:20 Deeper Information 4
18:11 A Bit More About RAG
19:26 Supply-Chain Autonomous Connector Abuse
20:37 Detection 1
21:49 Detection 2A
23:22 Detetion 2B
25:41 Mitigation 1 - For Regular Users and Non-Tech Types
27:28 Mitigation 2 - For IT Administrators
29:13 Mitigation 3 - For Developers and Architects
30:44 Outro