Findings from the Citizen Lab in collaboration with the SHARE Foundation confirm that an iMessage zero-click exploit was used to infect the iPhone of a member of Serbia's student protest movement with NSO Group's Pegasus spyware. The report highlights the use of a zero-click iMessage vulnerability to silently install surveillance software, enabling unauthorized access to private communications and device data.

What should defenders do?

Users should update their iPhones to the latest iOS version immediately to ensure they have the security patches addressing the exploited vulnerabilities. Apple typically releases security updates to fix zero-click exploits; keeping devices up to date is the primary defense against such threats.

criticalZero-Day

Pegasus Zero-Click Spyware Infects Serbian Student Activist's iPhone

Citizen Lab and SHARE Foundation report confirms NSO Group spyware deployment via iMessage exploit

CyberIntel DeskPublished 25 days agoUpdated less than a minute ago1 min read

Pegasus Zero-Click Spyware Infects Serbian Student Activist's iPhone

Key Takeaways

An iMessage zero-click exploit was used to infect an iPhone with NSO Group's Pegasus spyware.
The target was a member of Serbia's student protest movement.
The Citizen Lab and SHARE Foundation conducted the analysis.
Apple has released security updates to address the underlying iOS vulnerabilities.

Related Security News

criticalZero-Day

Hackers exploit Citrix NetScaler zero-day to deploy web shells

Cybersecurity firms report that attackers are exploiting a zero-day vulnerability in Citrix NetScaler to deploy custom web shells and tunneling malware. The exploitation grants root access, enables credential theft, and facilitates lateral movement into internal networks. Citrix has released patches and security advisories addressing CVE-2026-88772.

BleepingComputerabout 6 hours ago1 min read