Apple’s Lockdown Mode feature for iOS, iPadOS, macOS, and watchOS remains the best protection we have against sophisticated spyware. Here’s what you should know about the feature, to turn it on: Settings > Privacy & Security. glitchcat.xyz/p/four-things-…

In Chasing Shadows, profdeibert writes that Ben Hubbard was the first case “of an American journalist being targeted with Pegasus.” Hubbard was targeted in June 2018, but due to “concerns of New York Times management about going public,” The Citizen Lab didn’t publish until early 2020.

If you’re interested in aviation security, check out this fantastic 2013 talk from Hugo Teso on leveraging ADS-B, ACARS, and on-board systems to attack virtual airplanes systems. youtube.com/watch?v=wk1jIK…

All the newsrooms I’ve spoken to say having a confidential tip line is incredibly helpful, even if you do have to deal with some non-tips and other spam.

Italy’s national union for journalists is demanding answers from the authorities following news that seven phones in the country were targeted with spyware from Paragon — including a journalist. theguardian.com/world/2025/feb…

More of this, please. x.com/propublica/sta…

News articles often focus on spyware victims who had their devices checked and opted to go public. We rarely hear about those who didn’t. New court documents from WhatsApp v. NSO shed some light on the true scale of the targeting in a 2019 campaign. techcrunch.com/2025/04/09/cou…

I’m really looking forward to speaking at ODA-Nettverk Inspiration Day in Oslo on May 28! I’ll be there a couple of days prior and would love to meet folks for coffee and/or work. odanettverk.no/2025/04/22/run…

A team of journalists in Norway spent a year secretly monitoring a credit card fraud gang to uncover who's behind it and how they operate. Here's the story -- in English -- of how they unmasked Darcula and the crime-as-a-service software Magic Cat. nrk.no/dokumentar/xl/…

I’ll be in Stockholm in mid-June! Available for consulting, presentations, workshops for journalists and security folks. Also planning on spending some time in the wind tunnel. 🥳

The Kaspersky researchers who discovered Careto more than a decade ago privately concluded that the group was run by the Spanish government. Careto relied heavily on phishing emails impersonating Spanish newspapers. techcrunch.com/2025/05/23/mys…

Had the pleasure of being a guest on the Adventures of Alice & Bob Podcast recently! Check out the interview for stories about my work with journalists and high-risk people — and that one time I hacked a smart-rifle in 2015. beyondtrust.com/podcast/ep-79-…

Thanks to ODA-Nettverk for inviting me to keynote Inspiration Day yesterday! Really enjoyed being back in Oslo and talking about the importance of end-to-end encryption.

Working on my skydiving license in between security assessments, keynotes, and research. Here’s my first jump in Empuriabrava, Spain with two instructors and my own parachute.