In-depth analysis of Pegasus zero-click spyware, forensic investigations, legal developments, and detection methods — written by cybersecurity researchers for journalists, defenders, and policymakers.
The Pegasus spyware threat landscape shifted materially in late 2025 and 2026. A confirmed iMessage zero-click in Serbia, a final judgment against NSO Group, and new forensic reconstructions have reshaped what we know about mercenary spyware operations.
Pegasus zero-click iMessage exploits represent some of the most sophisticated attack chains ever documented. This technical analysis examines FORCEDENTRY, BLASTPASS, KISMET, and PWNYOURHOME, and what Apple's mitigations tell us about the cat-and-mouse cycle.
Citizen Lab and SHARE Foundation's September 2026 report confirmed the first forensically validated Pegasus infections in Serbia. This analysis examines the methodology, the targets, the iMessage zero-click, and the legal aftermath.
WhatsApp v NSO Group reached final judgment in 2025 with a $4.4 million award and a permanent injunction. This analysis examines the legal trajectory, the remittitur, and what the injunction actually accomplishes.
Detecting Pegasus zero-click infections is hard — implants self-delete and logs rotate. This guide covers MVT, iVerify, iOS backup analysis, and what high-risk users should actually do when they suspect targeting.
The Pegasus spyware threat landscape shifted materially in late 2025 and 2026. A confirmed iMessage zero-click in Serbia, a final judgment against NSO Group, and new forensic reconstructions have reshaped what we know about mercenary spyware operations.
Pegasus zero-click iMessage exploits represent some of the most sophisticated attack chains ever documented. This technical analysis examines FORCEDENTRY, BLASTPASS, KISMET, and PWNYOURHOME, and what Apple's mitigations tell us about the cat-and-mouse cycle.
Citizen Lab and SHARE Foundation's September 2026 report confirmed the first forensically validated Pegasus infections in Serbia. This analysis examines the methodology, the targets, the iMessage zero-click, and the legal aftermath.
WhatsApp v NSO Group reached final judgment in 2025 with a $4.4 million award and a permanent injunction. This analysis examines the legal trajectory, the remittitur, and what the injunction actually accomplishes.
Detecting Pegasus zero-click infections is hard — implants self-delete and logs rotate. This guide covers MVT, iVerify, iOS backup analysis, and what high-risk users should actually do when they suspect targeting.
Pegasus, Predator, and Graphite are three different mercenary spyware products from three different companies. This comparison clarifies the differences between NSO Group, Intellexa, and Paragon.
From KISMET in 2020 to the Serbia chain in 2026, Pegasus iMessage zero-click exploits have evolved against Apple's mitigations. This timeline traces the cat-and-mouse cycle.
Lockdown Mode reduces the attack surface but BLASTPASS showed it is not a guarantee. This evidence-based assessment examines what Lockdown Mode does, what the forensic record shows, and what high-risk users should conclude.
The 2021 Pegasus Project leak of ~50,000 selected phone numbers is the largest public window into mercenary spyware targeting. This analysis examines what the data reveals and the critical distinction between selection and infection.
End-to-end encryption protects data in transit, but Pegasus reads it after decryption on the device. This analysis explains the endpoint compromise problem and why E2EE alone cannot stop a resident implant.
