60
55
55
Pegasus, NoviSpy variant spyware found on devices of Serbian activists
Researchers confirmed the first 2026 Pegasus infection and a new NoviSpy variant on 14 Serbian activists, likely surveillance by Serbian authorities ahead of elections.
Citizen Lab confirmed with high probability the first forensically confirmed Pegasus infection of 2026, on a Serbian student activist hacked via a zero-click exploit between December of last year and January. Amnesty International confirmed two devices infected with a new NoviSpy variant, and the SHARE Foundation documented 14 targets including a member of parliament and a local government official, the largest documented spyware wave in Serbia to date. Evidence points to Serbian police or intelligence services, with NoviSpy infections occurring around police detention ahead of key local and parliamentary elections. Apple threat notifications preceded the findings, and updated iOS versions break the exploit chain.
68
60
60
30
30
30
30
55
60
Apple Patches Three Actively Exploited Zero
60
30
60
57
30
60
45
Call for Applications: Information Controls Research Program 2026
The Open Technology Fund is accepting applications for its 2026 Information Controls Research Program, announced via Citizen Lab.
The Citizen Lab reposted an announcement that the Open Technology Fund is accepting applications for the 2026 Information Controls Research Program. The program funds research on internet censorship and information controls. The announcement is a call for applications rather than a technical security finding.
15
60
60
45
60
‘Unprecedented’ Number of Apple Users Received Recent Spyware Alert
Apple users in 110 countries received an unprecedented wave of spyware threat notifications, per Citizen Lab analysis.
Apple customers in 110 countries recently received threat notifications alerting them to suspected spyware attacks targeting their devices. Citizen Lab describes the number of alerts as unprecedented. Such Apple threat notifications typically indicate mercenary spyware attacks against specifically targeted individuals.
70
60
45
30
60
55
60
55
60
60
30
35
30
30
60
30