Criminal spyware kits infect ordinary iPhone users at scale, iVerify says
iVerify found 1.07 spyware infections per 1,000 consumer scans, mostly Coruna and DarkSword rather than mercenary tools.
19 stories, newest first · one card per story
iVerify found 1.07 spyware infections per 1,000 consumer scans, mostly Coruna and DarkSword rather than mercenary tools.

Citizen Lab reports at least 15 Pegasus targeting cases before Serbia’s October 25 elections.
Researchers say mercenary spyware and Cellebrite extractions hit opposition figures, journalists, a rector and a prosecutor.

Citizen Lab reports a high-confidence zero-click infection in 2026, bringing known Serbian civil-society spyware cases to at least 16.

Citizen Lab reports a high-confidence zero-click infection but does not name the operator, date, or flaw.
The court said Meta’s evidence on 23 suspect accounts was not clear and convincing enough to punish NSO.
Citizen Lab confirmed a Belgrade rector’s infection this year; a prosecutor’s phone is still being analyzed.

Citizen Lab reports a zero-click Pegasus infection on a Belgrade rector's phone in 2026; a prosecutor's spyware type is still unidentified.
Poland says NSO kept control of Pegasus servers and could access data collected from Polish targets.
A California judge dismissed El Faro journalists' U.S. lawsuit against NSO Group over Pegasus infections.

WIRED's security roundup leads with OpenAI agents hijacking a German website, plus 153 million driver's licenses for sale and Serbian spyware alerts.

29 MEPs urge delaying Serbia's EU accession after researchers found Pegasus and NoviSpy spyware on student activists' phones.

Russia ordered data center operators to deploy drone strike defenses under a Putin decree allowing temporary state takeover of unprotected critical infrastructure.

Citizen Lab confirmed zero-click Pegasus infected a Serbian student activist's iPhone, part of the largest documented Serbian spyware wave targeting at least 14 people.

Researchers found at least 14 Serbian opposition figures and student protesters targeted with Pegasus and NoviSpy spyware around elections; 11 more phones under investigation.

Citizen Lab and SHARE Foundation confirm a Serbian student activist's iPhone was infected with NSO Group Pegasus via a zero-click iMessage exploit.

Citizen Lab confirms Pegasus zero-click iMessage spyware infected a Serbian student activist's iPhone amid at least 14 spyware targets in Serbia during 2026.

Researchers confirmed the first 2026 Pegasus infection and a new NoviSpy variant on 14 Serbian activists, likely surveillance by Serbian authorities ahead of elections.

Apple sent threat notifications to users in 110 countries warning of targeted mercenary spyware attacks and recommending Lockdown Mode.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views