October
Citizen Lab and the SHARE Foundation confirmed that the phone of University of Belgrade rector Vladan Đokić was infected with Pegasus spyware during 2026 through a zero-click exploit. Rade Bajić, a senior prosecutorial associate at the Public Prosecutor's Office for Organized Crime who had worked on the Generalštab case, received an Apple warning in August that his device had likely been targeted; an infection has not been confirmed. According to Citizen Lab, at least 16 members of Serbian civil society are now known to have been targeted with mercenary spyware. No state body has responded.
