Amnesty Security Lab
securitylab.amnesty.org · Company blog · on HN since 2023
Amnesty International's Security Lab publishes technical investigations into spyware, surveillance, and phone forensics used against activists and journalists.
What HN saysHN links it as the primary source for reports on Predator, Pegasus, and Cellebrite exploits, such as the Serbian activist case.
16HN people shared it
5linked it in comments
15stories submitted
88story points
3 months agolast shared
2023people per year2026
Most-shared posts
- 1To Catch a Predator: Leak exposes the internal operations of mercenary spyware5 people · 38 points · first shared 2025 · 1 comments on HN
- 2Cellebrite USB zero-day exploit used to target phone of Serbian student activist4 people · 14 points · first shared 2025 · 3 comments on HN
- 3"A Digital Prison": Surveillance and the suppression of civil society in Serbia2 people · 27 points · first shared 2024 · 1 comments on HN
- 4Predator: Technical deep-dive into Intellexa Alliance's surveillance products2 people · 3 points · first shared 2023 · discussion on HN
- 5Android Intrusion Logging for consensual forensic analysis2 people · 2 points · first shared 2026 · discussion on HN
- 6Serbia: Civil Society Threatened by Spyware1 people · 2 points · first shared 2023 · discussion on HN
- 7Pegasus: The evolution of the most notorious spyware system1 people · 2 points · first shared 2026 · discussion on HN
- 8Serbia a digital prison spyware and cellebrite used on journalists and activists1 people · first shared 2024
- 9Apple threat notifications what they mean and what you can do1 people · first shared 2024
- 10A web of surveillance1 people · first shared 2024
What HN people wrote when they linked it
lyu07282 · 2026-03-05
Israeli malware companies also use targeted ads to use drive-by exploits to infect people's devices using ad networks based on IP addresses:
https://securitylab.amnesty.org/latest/2025/12/intellexa-leaks-predato…
The fact that we still just allow arbitrary 3rd party code to run through ad networks is bizarre.
ChrisArchitect · 2025-03-01
Another Ars [dupe]:
Actual report https://securitylab.amnesty.org/latest/2025/02/cellebrite-zero-day-exp… (https://news.ycombinator.com/item?id=43205273)
DonnchaOC · 2024-12-16
Cellbrite police forensic tools used to secretly unlock a phone then infected with Serbian government spyware.
Full report at: https://securitylab.amnesty.org/latest/2024/12/serbia-a-digital-prison…
DrWhax · 2024-05-26
You can read our whole technical analysis on Indonesia here: https://securitylab.amnesty.org/latest/2024/05/a-web-of-surveillance/
quitit · 2024-04-11
Apple advise whom to contact on their website for guidance, but they are of course not alone in dispensing this and similar advice.
Apple:
"If you have received an Apple threat notification We strongly suggest you enlist expert help, such as the rapid-response emergency security assistance provided by the Digital Security Helpline at the nonprofit Access Now. Apple threat notification recipients can contact the Digital Security Helpline 24 hours a day, seven days a week through their website. Outside organizations do not have any information about what caused Apple to send a threat notification, but they can assist targeted users with tailored security advice."
https://support.apple.com/en-lamr/102174
Amnesty International:
"The Access Now Helpline and other Security Lab civil society partners are also equipped to support individuals who have received these Apple notifications."
https://securitylab.amnesty.org/latest/2024/04/apple-threat-notificati…