Opening a news app or checking a sports score can now carry a documented security risk for targeted individuals, one that requires no click, no tap, and no link. On October 15, 2026, Citizen Lab published findings describing what researchers call the first confirmed case of mercenary surveillance app spyware delivered through the targeted online…