Citizen Lab says the phone of a member of Europe’s PEGA Committee was infected twice with Pegasus, the NSO Group spyware that gave the panel its name.

Proofpoint researchers say the group behind the surge, TA416, had turned away from Europe for a few years.

“There can be no mistake about X’s knowledge, and, at best, negligent response to these trends,” the lawmakers wrote to company executives.

The letter comes as countries in Europe have moved over the past year to regulate or mandate legalized access for criminal and national security investigations.

The EU will vote Oct. 14 on a proposal that would use AI or humans to detect child sexual abuse material on their devices.  

ForeScout said one of them warranted rating at the maximum severity level, although DrayTek has issued patches.

In an interview with CyberScoop, Nate Fick also discussed the structure of his office and regions of emphasis.

The attack campaigns show how spyware tech companies have become more akin to nation-state threat actors.

A proposed EU cybersecurity regulation would isolate Europe from the global cybersecurity industry with unpredictable consequences.

The European Commission approved a similar data transfer agreement with the United States in July.