Natalia Krapiva 👩🏻‍💻🕊

Senior Tech-Legal Counsel @accessnow, former @BrooklynDA, @hrcberkeley, @UNHumanRights, @ICTYnews, @ManhattanDA. Tech | Law | Spyware | Eastern Europe

[Natalia Krapiva 👩🏻‍💻🕊 @natynettle]

BREAKING: @TheJusticeDept arrested US-based Oxygen Forensics CEO for concealing the tech company's Russian ties.

Civil society like @zairbekds & @OlgaNYC1211 have been sounding alarm for years about US law enforcement using this 🇷🇺 company for their sensitive operations! 🧵1/

[bot blocker | блокировщик ботов @antibot4navalny]

The Kremlin-aligned Matryoshka network is weaponizing the Krakow shooting to drive a wedge between Ukraine and its European partners (France, Germany, Italy and Poland).

There are two narratives that this campaign wants you to believe:

[анатолий капустин @A_Kapustin]

the only CEO who safe from chinese honeypots

[Vas Panagiotopoulos @criticalvas]

🇩🇪Germany’s proposed hack-back powers:While stronger defences against hybrid attacks & cybercrime are needed, granting the state risky new hacking powers is no substitute for effective, rights-respecting security measures, writes @freiheitsrechte 's Simone Ruf.
https://t.co/Uo9P0chZbX

[Vas Panagiotopoulos @criticalvas]

A cyberespionage campaign attributed to 🇷🇺Russia's APT29 has served exploit chains for already-patched iPhone & Android flaws to visitors of legit websites, with payloads built to steal cookies, device data & Wi-Fi passwords without any user interaction.

https://t.co/ZTJtc42STU

[Natalia Krapiva 👩🏻‍💻🕊 @natynettle]

Apple alerts victims in 99 countries that they were targeted by spyware.

The Cyber Intrusion Industry Guidelines that states will adopt under the Pall Mall Process must impose real consequences for the uncontrolled sale of these tools & the industry's refusal to curb the abuses

[Natalia Krapiva 👩🏻‍💻🕊 @natynettle]

@josephfcox Welcome to the club. We do run an actual technical Helpline but only for civil society at risk and now our mailboxes are full of AI-generated emails from random people looking to get their iPhone fixed or delete their email from a supermarket mailing list…

[John Scott-Railton @jsrailton]

UPDATE: Israeli company we caught delivering zero-click infections is #1 bidder on Starlink ads in 105 countries.

Data from @trendai_RSRCH suggests worldwide surveillance op targeting @Starlink users. 1/

By @razhael
https://t.co/uWFzemhgnL

[Vas Panagiotopoulos @criticalvas]

Commission’s guidelines undermine the 🇪🇺Dual-Use Regulation:

➡️Human rights considerations for the export of listed surveillance tech are not addressed, risking exports to abuse-prone countries.
➡️Transparency guidelines weaken member states’ reporting obligations, limiting public scrutiny of exports.

https://t.co/AYOqq7pO1e

[Vas Panagiotopoulos @criticalvas]

🇫🇷MP & former minister Agnès Pannier-Runacher says she was targeted by commercial spyware 3 times—twice as a minister & once as an MP. She filed a complaint with France’s domestic intel. agency (DGSI) on 28/09. Pegasus has been ruled out so far, according to Politico.
https://t.co/Caiul4CFjU

[The PHP Foundation @ThePHPF]

The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2.

PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.

[profdeibert @RonDeibert]

NEW @citizenlab report (in collaboration with The Share Foundation)

We find more cases of Pro-Democracy figures in Serbia 🇷🇸 targeted with NSO Group's Pegasus spyware

https://t.co/41caOPET16🇷🇸🇷🇸

[John Scott-Railton @jsrailton]

🚨NEW INVESTIGATION: University of Belgrade Rector who resisted crackdown on students was hacked with zero-click Pegasus.

Authorities raided his offices in March.

Serbia's snap elections are 6 days away.

There are more targets 1/

With @ShareConference https://t.co/cwFP5qyfNw

[Natalia Krapiva 👩🏻‍💻🕊 @natynettle]

6/ Requiring platforms to burn their detection methods to hold spyware makers to account isn't accountability.

It's impunity for the entire spyware industry.

[Natalia Krapiva 👩🏻‍💻🕊 @natynettle]

Bad news.

US District Court denied WhatsApp's motion to hold NSO in contempt for continuing to hack WhatsApp users after a court order barred it from doing so.

The evidence wasn't "clear and convincing" enough. 1/

[Natalia Krapiva 👩🏻‍💻🕊 @natynettle]

5/ Judges in spyware cases should keep this in mind: forcing WhatsApp to fully expose how it detects sophisticated spyware hands NSO, and everyone else in this market, a roadmap for evading detection.

[Joseph Cox @josephfcox]

Here's how exactly Telegram provides user data to U.S. authorities. A letter recently filed in court shows how Telegram transfers that data, such as IP address and phone number.

More: https://t.co/oZ5YthAq6p

[Natalia Krapiva 👩🏻‍💻🕊 @natynettle]

New report by @citizenlab exposes an ad tech firm that helps spyware companies to profile+target millions of people around the world, incl. in US and EU.

Regulators and companies like @Google & @Microsoft need to take urgent action to stop these abuses.

@kevincollier @NBCNews