Opening a news app or checking a sports score can now carry a documented security risk for targeted individuals, one that requires no click, no tap, and no link. On October 15, 2026, Citizen Lab published findings describing what researchers call the first confirmed case of mercenary surveillance app spyware delivered through the targeted online…
Forensic investigators at the University of Toronto’s Citizen Lab and Amnesty International confirmed on September 2 that Serbia deployed NSO Group’s Pegasus military-grade spyware against its own pro-democracy student movement using an iMessage zero-click exploit — an attack that required no action whatsoever from the target, and that Apple has since patched in iOS 18.4.1.…
