“All these players enable the proliferation of dangerous tools and capabilities used by governments against individuals, which threatens the safety of the internet ecosystem and the trust on which a vibrant and inclusive digital society depends,” according to a TAG report published on Tuesday.
The safety of the internet is not the only thing at stake as a result of spyware vendors’ efforts: the report shares stories of victims such as human rights advocates and journalists whose devices were infected with Pegasus.
“I have yet to see any reporting on legitimate use of this software,” Cisco Talos head of outreach Nick Biasini lamented in an interview with The Register.
Also in 2023, the US government added commercial spyware makers Intellexa and Cytrox to its Entity List, after placing similar export restrictions on NSO Group in 2021.
On Tuesday, a group of 35 nations, led by the UK and France, signed an agreement to “tackle proliferation and irresponsible use of commercial cyber intrusion tools and services.”
The findings don’t include any pricing info for these zero-days – which tend to allow remote code execution, sandbox escape and local privilege escalation.
The original article contains 958 words, the summary contains 189 words. Saved 80%. I’m a bot and I’m open source!