[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVWePoFELE3AjfUp2BPzvEe72KCgV8HJG9Jsxsy6vZEA":3},{"article":4,"iocs":53,"watch_terms":54,"solutions":55,"lesson":112},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"05ba4434-2571-43c7-a5c7-37abe783b443","Russia Used Cellebrite on Jailed Activist's iPhone Months After Sales Cutoff","russia-used-cellebrite-on-jailed-activist-s-iphone-months-after-sales-cutoff-fc34b1","Russian authorities used Cellebrite's UFED forensic tools to break into the iPhone of detained opposition activist Andrey Pivovarov in June 2021, three months after Cellebrite said it would stop selling its tools and services to Russia and Belarus. The finding, published June 25 by the Citizen Lab, rests on two things that rarely line up: traces on the phone itself and an official Russian","Citizen Lab researchers found evidence that Russian authorities used Cellebrite's UFED forensic tools to extract data from opposition activist Andrey Pivovarov's iPhone in June 2021, three months after Cellebrite announced a sales cutoff to Russia and Belarus. The finding combines MobileLockdown USB pairing records and an official Russian government forensic report naming the Cellebrite product, documenting searches through the activist's messaging apps and contacts with opposition figures. The case highlights a critical vulnerability in weaponry embargoes: existing hardware continues functioning offline long after vendor support ends, enabling continued surveillance and persecution of political dissidents.","Russia used Cellebrite forensic tools on activist's iPhone months after vendor halted sales.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F06\u002Frussia-used-cellebrite-on-jailed.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEhBSVw_gpnELsdqj1fhZXQ6Jm-ycv8RsT1-Q7vfNeyj0_Sd-keBXqrAA9w7Vz8qt0tKM3yXkVPknx8FtRKBGBShrelNUIlZbkoUDdDz4MEeWbStRxJt5ggHFA2LFTv5Lc2g-1VC9L7-HGtWY_8VZMTInbZrXa0UY_oZsu2GUeFDH8VsHnUekF4m64OET3U\u002Fs1600\u002Fiphone-hack.jpg","2026-06-26T08:49:35+00:00","2026-06-26T10:00:08.18507+00:00",9,[17,20,22,24,27,30],{"name":18,"type":19},"Cellebrite UFED","product",{"name":21,"type":19},"Cellebrite UFED Physical Analyzer",{"name":23,"type":19},"Cellebrite UFED 4PC",{"name":25,"type":26},"Cellebrite","vendor",{"name":28,"type":29},"FSB","threat_actor",{"name":31,"type":29},"Russian Investigative Committee","6cbdd207-aaa1-4176-9534-e156b125e917",{"id":32,"icon":34,"name":35,"slug":36},null,"Nation-state","nation-state",[38,43,48],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":44},{"id":45,"icon":34,"name":46,"slug":47},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":49},{"id":50,"icon":34,"name":51,"slug":52},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[25,18,21],{"controls":56,"vendors":111},[57,85],{"slug":58,"name":59,"problem":60,"products":61},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[62,69,77],{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":58,"product_name":66,"url":67,"description":68},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","Privileged Access Management","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fprivileged-access-management","Gives elevated rights to specific applications only where needed, so users do not need local admin accounts.",{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":73,"product_name":74,"url":75,"description":76},"beyondtrust","BeyondTrust","\u002Fvendor-logos\u002Fbeyondtrust.png","password-safe","BeyondTrust Password Safe","https:\u002F\u002Fwww.beyondtrust.com\u002Fproducts\u002Fpassword-safe","Privileged password and session management.",{"vendor_slug":78,"vendor_name":79,"vendor_logo":80,"product_slug":81,"product_name":82,"url":83,"description":84},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-privileged-access-management","Idira Privileged Access Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fhuman\u002Fprivileged-access-management","Privileged access management from the former CyberArk portfolio: vaulting, rotation, just-in-time access and session monitoring.",{"slug":86,"name":87,"problem":88,"products":89},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[90,98,103],{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":99,"product_name":100,"url":101,"description":102},"luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",[],{"slug":113,"title":114,"body":115,"framework_refs":116,"framework_notes":126},"cellebrite-tools-used-against-russian-activist-despite-sales-ban","Cellebrite Tools Used Against Russian Activist Despite Sales Ban","Russian authorities used Cellebrite forensic extraction tools against opposition activist Andrey Pivovarov months after the vendor publicly cut off sales to Russia, demonstrating that hardware embargoes alone are insufficient controls once devices are already in adversarial hands. The case reveals a critical gap in export control and technology restriction strategies: software licenses and hardware already deployed continue to function offline without ongoing vendor connectivity. This has serious implications for human rights defenders, journalists, and activists worldwide who may believe vendor policy changes translate into immediate operational restrictions. The exploitation of messaging apps and contact data underscores how mobile device forensics can be weaponized for political persecution, making device-level data protection a life-safety issue in repressive contexts.",[117,118,119,120,121,122,123,124,125],"NIST SP 800-53 AC-19 (Access Control for Mobile Devices)","NIST SP 800-53 SC-28 (Protection of Information at Rest)","CIS Control 4: Secure Configuration of Enterprise Assets","CIS Control 3: Data Protection","GDPR Article 25: Data Protection by Design and by Default","Wassenaar Arrangement Dual-Use Export Controls (Category 4D004)","EFF Surveillance Self-Defense Guidelines","NIST SP 800-124 Rev 2: Guidelines for Managing Mobile Device Security","UN Guiding Principles on Business and Human Rights (UNGPs)",{}]