The case shows that Russian sabotage against logistics and infrastructure targets is physically arriving in the DACH region and is no longer confined to Ukrainian territory.
The report shows that state-sponsored iPhone attacks in the DACH region specifically target government officials, underscoring the threat situation for exposed executives outside classic government environments as well.
Exploiting dangling COM registrations enables local privilege escalation on Windows; a public exploit discloses technical details and makes verification of the incomplete fix necessary.
The report adds the attack vector beyond patch information: it is not the viewer that must be compromised; the remotely controlled host can attack the controlling client.