Topics2 items
Spyware
Items filed under this tag, newest first, across issues.
Issue 02
Pegasus against Serbian pro-democracy figures
Citizen Lab, with the SHARE Foundation, reports with high confidence that Vladan Đokić, rector of the University of Belgrade, was infected in 2026 with NSO Group's Pegasus in a zero-click attack. Prosecutor Rade Bajić received an Apple threat notification on 13 August, which the lab treats as a high-confidence sign of mercenary-spyware targeting. The note brings the public count of Serbian civil-society cases to at least 16.
Why it matters
A university rector and a prosecutor are now in the public record, and the Serbian civil-society count is at least 16.
Exposing AdFection
Citizen Lab reports the first public confirmation of zero-click mercenary spyware delivered when a targeted advertisement renders, a technique it calls AdFection. Discover-Tech placed those ads, and devices at Al Jazeera were infected with spyware from Candiru, rebranded as Integrity Labs. Google and IAB Europe removed Discover-Tech from their advertising vendor lists in early October 2026.
Why it matters
A rendered ad was enough to deliver zero-click spyware, so the advertising stack itself is an exposure path.