lab
Interdisciplinary research lab at the University of Toronto that investigates digital espionage, spyware, and surveillance threats to civil society.
No evidence-backed relationships are recorded.
Paragon CEO Andrew Boyd says the spyware maker cannot see whom its customers target, and that halting updates leaves their systems ineffective in about 12 hours. Its promise to drop abusive customers therefore waits on outsiders finding the abuse first.
Reality
Paragon CEO Andrew Boyd says the spyware maker can't see who customers target, and withheld updates leave a customer's system ineffective in about 12 hours. Its zero-tolerance misuse policy depends on outside researchers to find abuse before that slow cutoff comes into play.
Reality
Apple's latest mercenary spyware notifications went to users in 110 countries. The response checklist is per-person, and a standard MDM baseline covers almost none of it.
Perspective Coverage
4 publishersReality
Apple told TechCrunch it warned selected users across 110 countries on Thursday. For any org with journalists, diplomats or executives on iOS, the hardened profile is no longer an edge case.
Perspective Coverage
3 publishersReality
Access Now says helpline requests ran 30% to 40% above the usual post-notification surge, a record. Among the recipients: a Ukrainian soldier who assumed the alert was a scam.
Reality
Google's threat intelligence team ties three suspected Russian clusters to abuse of Google OAuth, app passwords and device linking. MFA completes normally, so consent telemetry is the control.
Reality
SHARE Foundation, Citizen Lab and Amnesty confirmed three infections among at least 14 Serbian targets around the March local elections, and the Android half of the wave was installed by hand during police custody.
Perspective Coverage
7 publishersReality
Gen Digital found the chain while working a live UNC3569 intrusion. Tencent's April 2026 fix closed the link handler and left the bundled Chromium 80 in place, with its sandbox still switched off in the code.
Perspective Coverage
3 publishersReality
Files obtained by the researchers show BlackCore grading more than 40 pieces of content produced by its trainees. The contractor's final report to the client claims deceptive Facebook posts approaching 50,000 likes in a country with six million active Facebook users.
Reality
The generative feature inside Google Earth lasted about a day before the outcry pulled it, but the verification checklists that name Google Earth as ground truth were written for a product nobody could prompt.
Reality
A letter signed Friday turns device forensics on Serbian student activists into an enlargement demand, though the signatory who spoke to CyberScoop says spyware will not be the deciding factor if Brussels moves.
Reality
Google's threat intel group ties UNC6293, UNC7005 and UNC5976 to attacks on OAuth consent, app passwords, device codes and WhatsApp linking. The login succeeds; the token leaves anyway.
Reality
Google's threat group says UNC6293 gets targets to create the credential themselves. Detection content written against its lures ages in weeks. Switching the features off does not.
Reality