Pegasus and NoviSpy Used Against Serbian Protesters

2026-09-04T02:51:38Z40074e912f14b955de3bafb8879ab0317ce0e375b7cda3a023d9b8a65424432e
CVE-2026-0768CVE-2026-20212APT28Cisco-Nexus-9000GRULangflowMirage-KittenNodeRabbitNoviSpyPegasusPollCatSandwormSerbiaSonicWall-SMA-1000active-exploitationdark-web-marketplace-riskdata-breachmalwarephishingprivilege-escalationremote-code-executionspywaresurveillancevulnerabilityzero-day

What happened

Security news covering active exploitation and critical vulnerabilities in Cisco Nexus 9000, SonicWall SMA 1000, and Langflow; spyware targeting Serbian protesters; alleged Russia-linked cyber-operator training; AI-assisted zero-day exploitation and PLC attacks; an Iran-linked fake job-test malware campaign; and the sale of 412,000 festival ticket-buyer records on the dark web.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
securityaffairs
Record identifier
40074e912f14b955de3bafb8879ab0317ce0e375b7cda3a023d9b8a65424432e
Enrichment time
2026-09-04T02:51:38Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.