Pegasus hack of the EU’s own spyware investigator sparks calls for urgent action
THE SO WHAT
When an EU spyware investigator is hacked with Pegasus, it underlines that even oversight bodies aren’t insulated from commercial-grade surveillance. If your organization touches policy, regulation, or sensitive IP, treat mobile device security and zero-trust comms as board-level infrastructure, not IT hygiene.
READ THE SOURCE
MORE FROM THE WIRE
Deep & Emerging TechApple says it fixed a vulnerability in its Hide My Email tool that let anyone see a user's real email address; researchers first reported the issue in June 2025
A privacy feature quietly leaking real email addresses for roughly a year is a reminder that trust features need the same red-team rigor as auth and payments. If you’re marketing privacy as a differentiator, schedule independent testing and disclosure reviews — “we fixed it after press coverage” is now a reputational risk category.
Deep & Emerging TechWatch out - that Microsoft Calendar invite dated 2050 could be hiding stolen files and worse
Abusing far-future calendar invites to stash stolen data shows how attackers keep pivoting into overlooked SaaS surfaces. Security teams should add calendar and collaboration metadata to their DLP and anomaly detection scope — if it syncs, it’s a potential exfil channel.
Deep & Emerging Tech'$3.7B lost to deepfakes' — Why social media is the perfect launchpad for AI fraud
$3.7 billion in deepfake losses is no longer edge-case fraud — it’s a mainstream attack surface riding on social channels. Any organization with a consumer brand or executive presence online needs playbooks for identity verification, takedowns, and customer education before a synthetic video or voice call hits your users.
Deep & Emerging TechIntel Rallies After Saying It’ll Make More Headcount Reductions
Markets rewarding Intel for deeper cuts in its data center unit underscores how much pressure legacy silicon players are under to free cash for AI and foundry bets. If you depend on their roadmaps, assume more internal churn and reprioritization — lock in commitments on node availability and support windows rather than assuming business as usual.