https://www.youtube.com/watch?v=A4ylyhqZAaI
Trust talks about his experience working at NSO Group as an iOS exploit developer, discovering 0-click, 1-click zero-day vulnerabilities. An interview with T

https://www.theverge.com/22589942/nso-group-pegasus-project-amnesty-investigation-journalists-activists-targeted
In 2019, WhatsApp sued NSO Group, alleging that the software developer was involved in the hacking of around 1,400 devices using an exploit found in WhatsApp's code.

https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-into-nso-zero-click.html
Earlier this year, Citizen Lab managed to capture an NSO iMessage-based zero-click exploit being used to target a Saudi activist. In this two-part blog post series we will describe for the first time how an in-the-wild zero-click iMessage exploit works. Based on our research and findings, we assess this to be one of the most technically

https://en.wikipedia.org/wiki/Pegasus_(spyware)
Pegasus is a spyware developed by the Israeli cyber-arms company NSO Group that is designed to be covertly and remotely installed on mobile phones running iOS and Android. While NSO Group markets Pegasus as a product for fighting crime and terrorism, governments around the world have routinely used the spyware to surveil journalists, lawyers, political dissidents, and human rights activists.

https://arstechnica.com/information-technology/2021/12/google-warns-that-nso-hacking-is-on-par-with-elite-nation-state-spies/
The Israeli spyware developer NSO Group has shocked the global security community for years with aggressive and effective hacking tools that can target both Android and iOS devices. The company's

https://citizenlab.ca/2023/04/nso-groups-pegasus-spyware-returns-in-2022/
Figure 2: Three exploit chains released by NSO Group in 2022. To protect our continued ability to identify Pegasus infections, we are not releasing further details about these Pegasus indicators at this time as we continue to observe what we interpret to be concerted efforts by NSO Group to evade detection by the methods deployed by researchers.

https://www.npr.org/2021/08/25/1027397544/nso-group-pegasus-spyware-mobile-israel
The Pegasus Project reports NSO has sold its spyware to authoritarian governments and states with limited freedoms, including Hungary, Saudi Arabia and the United Arab Emirates, countries Israel

https://www.washingtonpost.com/investigations/interactive/2021/nso-spyware-pegasus-cellphones/
NSO Group's Pegasus spyware, licensed to governments around the globe, can infect phones without a click. Military-grade spyware licensed by an Israeli firm to governments for tracking

https://www.darkreading.com/cyberattacks-data-breaches/nso-group-back-business-3-new-ios-zero-click-exploits
Israeli spyware firm NSO Group is back with at least three new iOS 15 and iOS 16 zero-click exploit chains, which were used against human rights activists in Mexico and elsewhere across the world

https://www.nsogroup.com/job/researcher/
Our perks: Incredible benefits Hybrid and flexible Multiple career advancement opportunities As a Security Researcher, you will be: Work with top-notch researchers using the latest technologies Research low-level mechanisms, finding and exploiting vulnerabilities and circumventing modern mitigation techniques If you have: Vulnerability research and exploit development experience Strong

https://onlinelibrary.wiley.com/doi/full/10.1002/tie.22321
Advanced cyber technology like NSO Group Technologies' (NSO) controversial Pegasus spyware blurs distinctions between "good" and "bad." This case follows the Israeli-based international leader in cyber espionage and developer NSO and one of its co-founders, Shalev Hulio from its creation in 2010 to the present.

https://en.wikipedia.org/wiki/NSO_Group
NSO Groups offers the smartphone spyware tool Pegasus to government clients for the exclusive intended purpose of combating crime and terrorism. The first version of Pegasus was finalised in 2011. Pegasus spyware is classified as a weapon by Israel and any export of the technology must be approved by the government. The Israeli Ministry of Defense licenses the export of Pegasus to foreign

https://www.techrepublic.com/article/google-threat-analysis-group-spyware/
NSO Group, one of the biggest CSVs and reported since 2015 for its operations, is still visible and active. ... Individual vulnerability researchers and exploit developers are the main sources for

https://www.wired.com/story/nso-group-forcedentry-pegasus-spyware-analysis/
The Israeli spyware developer NSO Group has shocked the global security community for years with aggressive and effective hacking tools that can target both Android and iOS devices. The company's

https://www.securityweek.com/nso-group-used-at-least-3-ios-zero-click-exploits-in-2022-citizen-lab/
April 18, 2023. Israeli spyware vendor NSO Group used at least three previously unknown iOS zero-click exploits in 2022, according to a new report from Citizen Lab. NSO Group's Pegasus spyware has often been delivered to targeted iPhones using zero-click and/or zero-day exploits, and while Apple has taken steps to prevent attacks against its

https://www.apple.com/mt/newsroom/2021/11/apple-sues-nso-group-to-curb-the-abuse-of-state-sponsored-spyware/
Apple's legal complaint provides new information on NSO Group's FORCEDENTRY, an exploit for a now-patched vulnerability previously used to break into a victim's Apple device and install the latest version of NSO Group's spyware product, Pegasus. ... "Our threat intelligence and engineering teams work around the clock to analyse new

https://techcrunch.com/2023/04/18/apple-lockdown-mode-iphone-nso-pegasus/
Of the recent batch of exploits: The first exploit was deployed in January 2022 by NSO customers and exploited the iPhone's FindMy feature, which helps owners locate their lost or stolen phones.

https://securitylab.amnesty.org/latest/2023/12/india-damning-new-forensic-investigation-reveals-repeated-use-of-pegasus-spyware-to-target-high-profile-journalists/
The recovered samples are consistent with the NSO Group's BLASTPASS exploit, publicly identified by Citizen Lab in September 2023 and patched by Apple in iOS 16.6.1 (CVE-2023-41064). Anand Mangnale's phone was vulnerable to this zero-click exploit at the time of the attack.

https://www.theregister.com/2024/01/24/us_judge_rejects_pegasus_spyware/
Wed 24 Jan 2024 // 23:31 UTC. A US court has rejected spyware vendor NSO Group's motion to dismiss a lawsuit filed by Apple that alleges the developer violated computer fraud and other laws by infecting customers' iDevices with its surveillance software. Apple sued NSO, developer of the notorious Pegasus spyware, back in November 2021 and asked

https://www.zdnet.com/article/apple-sues-nso-group-over-pegasus-spyware/
Apple is seeking a permanent injunction that bans NSO Group from using any Apple software, services, or devices. Written by Stephanie Condon, Senior Writer Nov. 23, 2021 at 11:58 a.m. PT Security

https://www.engadget.com/whatsapp-says-nso-group-launched-attacks-from-us-155827515.html
Facebook just escalated its lawsuit over surveillance firm NSO Group's WhatsApp call exploit attacks.The WhatsApp team has filed accusations that NSO relied on US-based servers to stage its

https://www.reddit.com/r/cybersecurity/comments/qox9qn/how_do_groups_like_nso_find_exploits/
Some years ago the "hacking team" group was been hacked and all their emails were been published on the net. Wikileaks has taked all those email and has published in their site with a searchable interface. There are some email where they deal with developpers to buy 0day.

https://tspace.library.utoronto.ca/bitstream/1807/127680/1/Report%23165--triple-threat.pdf
Overall, we believe NSO Group deployed at least three zero-click chains in 2022 (Figure 2), exploiting a variety of apps and features on the iPhone. We have observed cases of some of the chains deployed as zero-days against iOS versions 15.5 and 15.6 (FINDMYPWN), and 16.0.3 (PWNYOURHOME). Figure 2: Three exploit chains released by NSO Group in

https://carnegieendowment.org/research/2024/06/us-europe-cyber-policy-joint-statement-pall-mall-process?lang=en
Two major government initiatives seek to limit the proliferation of commercial hacking tools: one is by the United States, outlined in the U.S. Joint Statement on Efforts to Counter the Proliferation and Misuse of Commercial Spyware, and another is by the United Kingdom and France, introduced in the Pall Mall Process (PMP). The two efforts share the same goal, a safer cyber landscape, but have