[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fA1Hu0vS08d2mPSTW3Y_TfNt7eriXdmOj5LGnNI1xCJo":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"status":22,"created_at":23,"published_at":24,"article":25,"tags":29,"podcasts":48},"e0109649-fbba-487f-9981-1c2783a3d238","serbias-alleged-state-spyware-use-threatens-eu-accession","63262e38-8686-4962-b947-08d12ae499f8","Serbia's Alleged State Spyware Use Threatens EU Accession","Serbia's government allegedly deployed commercial spyware tools — Pegasus and NoviSpy — against student activists and civil society members, representing a severe abuse of surveillance technology by a state actor. This constitutes not only a fundamental violation of individuals' privacy and civil liberties but also a direct undermining of democratic processes ahead of elections. The case highlights how the absence of legal accountability and independent oversight mechanisms allows governments to weaponize powerful surveillance tools without consequence. For organizations and democratic institutions, this underscores the critical importance of regulatory frameworks that constrain state surveillance and protect citizens' data rights.","**Immediate actions:**\n- Conduct independent forensic audits of devices belonging to activists, journalists, and civil society members to detect spyware infections.\n- Establish a clear legal moratorium on the procurement and deployment of commercial spyware until robust oversight frameworks are in place.\n\n**Long-term improvements:**\n- Enact and enforce national legislation that explicitly governs state use of surveillance tools, requiring judicial authorization and transparency reporting.\n- Require EU candidate countries to align surveillance practices with the EU Charter of Fundamental Rights and GDPR principles as a binding accession condition.\n- Create an independent, cross-border oversight body empowered to investigate and sanction unlawful state surveillance within EU candidate nations.\n\n**Detection & accountability measures:**\n- Deploy civil-society-accessible mobile threat detection tools (e.g., Amnesty International's Mobile Verification Toolkit) to enable ongoing spyware detection for at-risk individuals.\n- Mandate that governments publish transparency reports detailing the scope, legal basis, and oversight of any lawful interception or surveillance activities.\n- Establish secure whistleblower channels so insiders can report illegal surveillance programs without fear of retaliation.",[12,13,14,15,16,17,18,19,20,21],"GDPR Article 5 (Data minimisation and purpose limitation)","GDPR Article 9 (Processing of special categories of personal data)","EU Charter of Fundamental Rights – Article 7 (Respect for private life)","EU Charter of Fundamental Rights – Article 8 (Protection of personal data)","NIST SP 800-53 AU-12 (Audit Record Generation)","NIST SP 800-53 IR-6 (Incident Reporting)","CIS Control 3 (Data Protection)","CIS Control 17 (Incident Response Management)","Council of Europe Budapest Convention on Cybercrime – Article 32","UN Guiding Principles on Business and Human Rights (regarding spyware vendors)","published","2026-09-04T22:20:22.384328+00:00","2026-09-04T22:20:22.045+00:00",{"id":7,"url":26,"slug":27,"title":28},"https:\u002F\u002Fcyberscoop.com\u002Feu-parliament-serbia-accession-spyware-demands\u002F","european-parliament-members-call-for-slowdown-of-serbia-s-eu-entry-over-spyware--a7a2d0","European parliament members call for slowdown of Serbia’s EU entry over spyware use",[30,36,42],{"id":31,"name":32,"slug":33,"description":34,"color":35},"182e11d5-57c4-444e-8ec8-4682ad60261b","Incident Response","incident-response","Slow detection, poor containment, missing playbooks","#14b8a6",{"id":37,"name":38,"slug":39,"description":40,"color":41},"c0dcc566-3654-4d70-8ede-262a198e732f","Regulatory Compliance","regulatory-compliance","GDPR, NIS2, DORA, sector-specific violations","#ec4899",{"id":43,"name":44,"slug":45,"description":46,"color":47},"c8b843a5-d5a7-41d1-8d3b-cabded09d2ef","Data Protection","data-protection","Unencrypted data, missing DLP, poor classification","#3b82f6",[]]