Forensic investigators at the University of Toronto’s Citizen Lab and Amnesty International confirmed on September 2 that Serbia deployed NSO Group’s Pegasus military-grade spyware against its own pro-democracy student movement using an iMessage zero-click exploit — an attack that required no action whatsoever from the target, and that Apple has since patched in iOS 18.4.1.…