Researchers confirm Pegasus and a new NoviSpy variant hit at least 14 Serbian activists and students since January.
The iOS flaw allowed forensic extraction of supposedly deleted conversations from Signal and other encrypted apps, undermining user privacy controls.