September
The SHARE Foundation published forensic findings confirming that at least 14 people in Serbia had been targeted with commercial spyware since the beginning of 2026: members of the student movement, opposition activists, one member of parliament and one local councillor. Analysis carried out with the Citizen Lab and the Amnesty International Security Lab identified Pegasus, delivered through a zero-click exploit, and a new version of the domestic NoviSpy. The MP among the targets, Radomir Lazović, said the server infrastructure led to the BIA. No state body responded to the findings.
