Pegasus Used Against MEP Investigating Pegasus, Citizen Lab Finds
2026-07-04T02:51:43Z•8f16760f63ae918f97ab48ea7fc1c1a6afe0ff9d33e8d766659368d8ff41881a
CVE-2026-45659DKIMDMARCFortiBleedJADEPUFFERKEVMTA-STSNetNutSPFVerceladobe-coldfusion-campaign-classic','remote-code-executionai-driven-ransomwarecredential-theftemail-securityfortigatelaw-enforcement-takedownmicrosoft-sharepointnsogrouppegasusransomwareresidential-proxyshadow-aispywaresupply-chaintargeted-surveillance
What happened
Multiple high-impact security events reported: Citizen Lab confirmed NSO Group Pegasus spyware infected a former MEP investigating the tool; Sysdig documented JADEPUFFER, an end-to-end AI-driven ransomware operation that autonomously exploited systems, harvested credentials, moved laterally, and encrypted data; a shadow AI supply-chain breach at Vercel (April 2026) tied to an unvetted AI tool led to data theft and a $2M extortion; law enforcement disrupted the NetNut malicious residential proxy network; Comparitech found government and healthcare sectors have weak email authentication (SPF/DM/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 8f16760f63ae918f97ab48ea7fc1c1a6afe0ff9d33e8d766659368d8ff41881a
- Enrichment time
- 2026-07-04T02:51:43Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.