Excited to see Google publicly launch Intrusion Logging, the first purpose-built system to enable forensic investigations of advanced digital attacks on mobile. We @amnesty.org have collaborated with Android Security on it's design over the past two years securitylab.amnesty.org/latest/2026/...

Android Intrusion Logging as a new source of data for consensual forensic analysis  - Amnesty International Security Lab

Google has today announced the launch of a new ‘Android Intrusion Logging’ feature as part of Android Advanced Protection Mode (AAPM). The new intrusion logging feature promises to be a major aid to d...

securitylab.amnesty.org

Pech für die Angreifer: Auch der Leiter unseres Amnesty Security Labs, @donncha.is, erhielt eine der Signal-Attacken - er und sein Team konnten diese mit einer russischen Gruppe, die unter dem Kürzel »UNC5792« bekannt ist, in Verbindung bringen.👇 www.spiegel.de/politik/deut...

(S+) Signal-Angriff und Killerteams: So unverfroren agieren russische Agenten in Deutschland

Der Angriff auf Signal-Nutzerkonten deutscher Spitzenpolitiker versetzt Berlin in Alarm. Russlands Agenten spionieren immer dreister. Moskau sieht Deutschland inzwischen als »Feind Nummer eins«. Die S...

spiegel.de

In January, a phishing message arrived on my Signal account, supposedly from "Signal Support." I was able to turned the tables on the attackers and get a unique view of the wide-scale campaign by the attacker's targeting journalists and politicians I was target #13,730 in their database.

Morpheus: A new Spyware linked to IPS Intelligence - Osservatorio Nessuno https://osservatorionessuno.org/blog/2026/04/morpheus-a-new-spyware-linked-to-ips-intelligence/

“We analyzed a 2025 sample of the Spyrtacus #spyware, version 8.71. …We confirm attribution to 🇮🇹SIO S.p.A. and provide a small set of IoCs to detect infections of this malware family.” osservatorionessuno.org/blog/2026/04...

We publish a major @citizenlab.ca report on Webloc, an ad-based mass surveillance system that monitors the movements and personal characteristics of hundreds of millions people globally based on data obtained from mobile apps and digital advertising. Customers include ICE, El Salvador, and Hungary.

The Citizen Lab@citizenlab.ca · 4mo ago

NEW REPORT: “Uncovering Webloc: An Analysis of Penlink’s Ad-based Geolocation Surveillance Tech” Our research confirms that ad-based surveillance tech Webloc is used by military, intelligence, and law enforcement agencies across the globe. citizenlab.ca/research/ana...

NEW: For months, I’ve been working on the story of Peter Williams, the former U.S. defense contractor who stole several hacking tools and then sold them to a Russian broker. Here’s what we know about the case, what we still don’t know, and a peek behind the scenes at how I reported this story.

Inside the story of the US defense contractor who leaked hacking tools to Russia | TechCrunch

The former boss of a U.S. hacking tools maker was jailed for selling highly sensitive software exploits to a Russian broker. This is how we first learned of his arrest, reported the story, and some of...

techcrunch.com

If the Palestine Action hunger strikers die - which they could do at any moment, as they are now very close to the end - it will be the government that killed them. Today’s column explains why. Please share, and write urgently to your MP. www.theguardian.com/commentisfre...

Let’s be clear: if the Palestine Action hunger strikers die, the government will bear moral responsibility | George Monbiot

The three remaining hunger strikers have been convicted of nothing. Yet with astonishing cruelty, ministers refuse to listen to their reasonable demands, says Guardian columnist George Monbiot

theguardian.com

NEW: Meet the folks at AccessNow's Digital Security Helpline, who have been investigating government spyware for more than a decade, helping journalists and dissidents all over the world. I spoke to Hassen Selmi, who heads the incident response team, to learn how his team fights spyware abuses.

Meet the team that hunts government spyware

For years, Access Now’s Digital Security Helpline has been aiding journalists and dissidents who have been targeted with government spyware. This is how they operate.

techcrunch.com

NEW: Staffers at notorious spyware maker Intellexa had live remote access to their customers' surveillance systems. This allowed them to see the personal data of targets hacked with Intellexa's spyware Predator, according to research based on a leaked training video. Needless to say, this is bad.

Sanctioned spyware maker Intellexa had direct access to government espionage victims, researchers say | TechCrunch

Based on a leaked video, security researchers alleged that Intellexa staffers have remote live access to their customers' surveillance systems, allowing them to see hacking targets’ personal data.

techcrunch.com

1/ Today we release a new report exposing previously undisclosed entities connected to the wider #Intellexa ecosystem as well as newly identified activity clusters in Iraq and indications of activity in Pakistan: www.recordedfuture.com/research/int...

Intellexa’s Global Corporate Web

recordedfuture.com

Our full report can be found here: securitylab.amnesty.org/latest/2025/... Haaretz - www.haaretz.com/israel-news/... InsideStory - insidestory.gr/article/inte... Inside-IT - www.inside-it.ch/intellexa-le...

To Catch a Predator: Leak exposes the internal operations of Intellexa’s mercenary spyware - Amnesty International Security Lab

Drawing on leaked internal company documents, sales and marketing material, as well as training videos, the “Intellexa Leaks” investigation gives a never-before-seen glimpse of the internal operations...

securitylab.amnesty.org

🚨 A huge leak exposes the new targets and internal operations of Intellexa, the secretive and murky company behind the notorious Predator spyware. Introducing #IntellexaLeaks, a joint investigation with partners @insidestory.gr, @haaretzcom.bsky.social & WAV Research Collective 🧵👇

This is amazing research by Nadia Heninger and her co-authors Wenyi Morty Zhang, Annie Dai, Keegan Ryan, Dave Levin and Aaron Schulman. TL;DR a huge number of satellite links over our heads are totally unencrypted. satcom.sysnet.ucsd.edu

SCOOP: Spyware maker NSO Group confirmed to us that the company has been acquired by a U.S. investment group. NSO's spokesperson said the group "has invested tens of millions of dollars in the company and has acquired controlling ownership," but declined to say who is behind the investment.

Spyware maker NSO Group confirms acquisition by US investors | TechCrunch

NSO Group confirmed to TechCrunch that an unnamed group of American investors has taken “controlling ownership” of the surveillance tech maker.

techcrunch.com

If you're based in Berlin, there's an event this Tuesday on spyware, hosted by @amnestyuk.bsky.social and @papertrailmedia.de. It includes workshops by @donncha.is, @jurrevanbergen.nl, and others, drop-in sessions, and a panel. Tickets are still available: www.hebbel-am-ufer.de/programm/pde...

Amnesty International

Digital Surveillance: How States Are Spying on the Resistance

hebbel-am-ufer.de

Danke Berlin! #AllEyesOnGaza

Join us? 💥Workshops w/ @papertrailmedia.de @amnesty.de @interseclab.bsky.social 💥Dig. Security Clinic w/ @accessnow.org, @pressefreiheit.bsky.social&Tact. Tech 💥Panel w/ @donncha.is @sophieintveld.bsky.social @davidyambio.bsky.social @anjaosterhaus.bsky.social &Art by @forensicarchi.bsky.social

For more than a year I’ve spoken with Scattered Spider “caller” Noah Urban from a Florida jail. I wanted to know how they chose victims, their methods and how Noah became entangled in a virtually and physically violent world. We’re publishing his story today: www.bloomberg.com/news/feature...

‘I Was a Weird Kid’: Jailhouse Confessions of a Teen Hacker

Noah Urban’s role in the notorious Scattered Spider gang was talking people into unwittingly giving criminals access to sensitive computer systems.

bloomberg.com

Staatliche digitale Überwachung der Zivilgesellschaft: Am 30.9. bringen Amnesty und das HAU in Berlin Journalist*innen, Aktivist*innen, Technolog*innen, politische Entscheidungsträger*innen und die von Spionageprogrammen Betroffenen zusammen. Infos & Anmeldung 👇 www.hebbel-am-ufer.de/programm/pde...

Amnesty International

Digital Surveillance: How States Are Spying on the Resistance

hebbel-am-ufer.de

There is no more time for excuses: as the evidence of Israel’s genocide continues to mount the international community cannot claim they didn’t know.

We are announcing Bugbane, an open-source Android app that makes consensual mobile forensics more accessible. It's compatible with MVT and AndroidQF. Now in an open-beta, we are calling for community feedbacks before a general public release by EOY! osservatorionessuno.org/blog/2025/09...

Bugbane: Simplifying consensual Android forensics

Bugbane: Simplifying consensual Android forensics

osservatorionessuno.org

🚨Out today: In Pakistan können jederzeit über 4 Mill. Menschen gleichzeitig willkürlich überwacht werden. Die Technik („LIMS“) stammt vom deutschen Unternehmen Utimaco und ist eigentlich im Export kontrolliert. Unsere neue, einjährige Recherche von @amnesty.de @amnesty.org & Partner*innen zeigt:

Great Firewall Export: A new investigation by @amnesty.org and partners reveals how Geedge Networks, a Chinese company is commercializing the tech behind China's notorious "Great Firewall". A huge leak of Geedge data reveal their products, deployed in China, Pakistan, and Myanmar among others.

Jurre van Bergen@jurrevanbergen.nl · 11mo ago

BREAKING: Amnesty International research found illegal surveillance mass targeted surveillance with LIMS from Utimaco and Datafusion and Chinese commercialized Great Firewall provider active in Pakistan through a leak of documents of Geedge Networks. 🧵#BreakTheFirewall

BREAKING: Amnesty International research found illegal surveillance mass targeted surveillance with LIMS from Utimaco and Datafusion and Chinese commercialized Great Firewall provider active in Pakistan through a leak of documents of Geedge Networks. 🧵#BreakTheFirewall

If youre going to the Global Gathering. I'd like to invite you on the 9th of September at 15:00-1600 to circle 3 where we'll detail our new investigation "Inside a Cross-Border Investigation on Surveillance and Censorship Tech" w/ InterSecLab. wiki.digitalrights.community/index.php?ti...

A spyware vendor was behind a recent campaign that abused a vulnerability in WhatsApp to deliver an exploit capable of hacking into iPhones and Macs.

WhatsApp fixes 'zero-click' bug used to hack Apple users with spyware | TechCrunch

A spyware vendor was behind a recent campaign that abused a vulnerability in WhatsApp to deliver an exploit capable of hacking into iPhones and Macs.

techcrunch.com

I can’t believe we are watching the deliberate starvation in Gaza and are this helpless. How is this 2025? How did we as a human race allow this to happen? How?

🚨BREAKING: The last journalists working for AFP in Gaza have said they can no longer work for the news agency. They are out of energy and they are starving to death. I have never seen a statement from a news organisation like it. 🧵

According to a DOJ IG report released this week, the Sinaloa cartel identified an FBI official working at the U.S. Embassy in Mexico, tracked him via phone location data, tapped into Mexico’s surveillance camera network, & killed an unspecified number of informants. www.reuters.com/world/americ...

Sinaloa cartel used phone data and surveillance cameras to find FBI informants, DOJ says

A hacker working for the Sinaloa drug cartel was able to obtain an FBI official's phone records and use Mexico City's surveillance cameras to help track and kill the agency's informants in 2018, the U.S. Justice Department said in a report issued on Thursday.

reuters.com