The most serious flaw in the monthly security update affects the Android system and could be exploited to achieve local escalation of privilege, the company said.

The November security bulletin includes two CVE's reportedly exploited in the wild.

APT42 targeted the Biden and Trump presidential campaigns from May to June, Google researchers found.

Objectives from the hacking groups include espionage, information operations or destructive activities, researchers say.

The commercial spyware industry continues to supply highly advanced surveillance capabilities despite efforts to better regulate it.

The group, tracked as "Cold River," has previously targeted U.S. nuclear facilities and other high-profile targets around the world.

Despite an August patch, Russian and Chinese state-backed hackers are using a vulnerability in the popular software to carry out espionage.

Russian hacking operations in support of intelligence gathering and information operations related to the war show no signs of slowing down.

The operations are just the latest example of the proliferation of sophisticated spyware among private vendors, Google says.

Google's report on the Ukraine war shows how Russia executed information operations and hacking campaigns to gain an advantage in cyberspace.