[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYxnxiTEOmeIzdorFfZ_4dqP_QYGflQRwNSlqgM4xoRk":3},{"article":4,"iocs":53,"watch_terms":63,"solutions":64,"lesson":159},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"b4316636-adb6-47b6-af31-e8f9eda1853b","European Parliament Member Investigating Spyware Was Hacked With Pegasus","european-parliament-member-investigating-spyware-was-hacked-with-pegasus-8f8ffe","A new report from the Citizen Lab has revealed that former Member of the European Parliament Stelios Kouloglou had his mobile device repeatedly hacked with the notorious Pegasus spyware while serving on a committee that was tasked with investigating the abuse of such commercial surveillance tools in the bloc. \"Through forensic analysis of his device, we found that the attackers could have had","Citizen Lab researchers discovered that former European Parliament member Stelios Kouloglou was infected with Pegasus spyware on multiple occasions (October 2022, March 2023) while serving on the PEGA Committee investigating commercial surveillance abuse in the EU. The infections were likely delivered via a zero-click exploit in Apple's HomeKit software (PWNYOURHOME), and forensic analysis indicates attackers could have accessed confidential committee documents and deliberations. The attack infrastructure overlaps with campaigns targeting Russian and Belarusian-speaking journalists and activists in Europe, suggesting a licensed Pegasus operator with multi-country authorization.","EU Parliament member investigating spyware was repeatedly hacked with Pegasus while serving on oversight committee.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F07\u002Feuropean-parliament-member.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEhC5WPtje84KYSxAYIbS54mCBmT7srsKokiZPsDcIbhcky59AAsHQYbWo4TrLsj3y1d7uI10DVgOt_5aEFaPQxKiwAPsJQJllaBBtuogSb7D8JF54_ahgzDstn8ST7WTRUAnhC10prFKCJgfkqEOW7m0o1yWDb-jzZFUWkzXEi65Sl5lyuLKr_4Da5ZpAgY\u002Fs1600\u002Fiphone-spyware.jpg","2026-07-03T11:05:43+00:00","2026-07-03T12:00:16.037053+00:00",9,[17,20,23,25,28,30],{"name":18,"type":19},"Pegasus operator (unattributed, multi-country licensed)","threat_actor",{"name":21,"type":22},"Pegasus","product",{"name":24,"type":22},"Predator",{"name":26,"type":27},"NSO Group","vendor",{"name":29,"type":27},"Intellexa",{"name":31,"type":27},"Apple","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":32,"icon":34,"name":35,"slug":36},null,"Vulnerabilities","vulnerabilities",[38,43,48],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":44},{"id":45,"icon":34,"name":46,"slug":47},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":49},{"id":50,"icon":34,"name":51,"slug":52},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[54,58,61],{"type":55,"value":56,"context":57},"email","rauharepo888@gmail.com","Pegasus operator email address used in HomeKit exploit lookup and targeting infrastructure",{"type":59,"value":21,"context":60},"malware","Commercial spyware used to compromise target's iPhone on multiple occasions",{"type":59,"value":24,"context":62},"Intellexa spyware used to compromise visiting journalist Thanasis Koukakis",[31,26,29],{"controls":65,"vendors":153},[66,95,124],{"slug":67,"name":68,"problem":69,"products":70},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[71,79,87],{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","duo","Cisco Duo","https:\u002F\u002Fduo.com\u002F","MFA and device trust, with support for passkeys and security keys.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"yubico","Yubico","\u002Fvendor-logos\u002Fyubico.png","yubikey","YubiKey","https:\u002F\u002Fwww.yubico.com\u002Fproducts\u002F","Hardware security keys for FIDO2, passkeys and smart card login, in USB and NFC versions.",{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"slug":96,"name":97,"problem":98,"products":99},"patch-management","Automated patch management","Known holes get closed in days, not months.",[100,108,116],{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":125,"name":126,"problem":127,"products":128},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[129,137,145],{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-endpoint","Singularity Endpoint","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fendpoint-security\u002F","Endpoint protection and detection with automated response and rollback.",{"vendor_slug":138,"vendor_name":139,"vendor_logo":140,"product_slug":141,"product_name":142,"url":143,"description":144},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",{"vendor_slug":146,"vendor_name":147,"vendor_logo":148,"product_slug":149,"product_name":150,"url":151,"description":152},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",[154],{"slug":155,"name":31,"logo_path":156,"roles":157},"apple","\u002Fvendor-logos\u002Fapple.png",[158],"affected",{"slug":160,"title":161,"body":162,"framework_refs":163,"framework_notes":176},"pegasus-zero-click-spyware-targets-eu-parliament-investigator","Pegasus Zero-Click Spyware Targets EU Parliament Investigator","A European Parliament member investigating commercial spyware abuse was himself targeted with Pegasus via a zero-click exploit in Apple's HomeKit, requiring no user interaction to compromise the device. This attack demonstrates the acute risk that sophisticated, state-licensed spyware poses to democratic oversight processes — the very people investigating surveillance abuse were being surveilled. The repeated infections over several months suggest a failure to detect, respond to, and remediate the initial compromise, allowing prolonged access to sensitive committee materials. When high-value public officials handle confidential legislative work on personal or insufficiently hardened devices, the consequences extend beyond individual privacy to institutional integrity and national security.",[164,165,166,167,168,169,170,171,172,173,174,175],"CIS Control 4: Secure Configuration of Enterprise Assets","CIS Control 7: Continuous Vulnerability Management","CIS Control 13: Network Monitoring and Defense","NIST SP 800-124 Rev. 2: Guidelines for Managing Mobile Device Security","NIST SP 800-53 SI-3: Malicious Code Protection","NIST SP 800-53 IR-4: Incident Handling","NIST SP 800-53 SC-28: Protection of Information at Rest","GDPR Article 32: Security of Processing","GDPR Article 33: Notification of a Personal Data Breach","EU Cybersecurity Act (ENISA mandate for high-risk entity guidance)","MITRE ATT&CK T1476: Deliver Malicious App via Other Means (Zero-Click)","MITRE ATT&CK T1512: Video Capture \u002F Device Sensor Abuse",{}]