The letter follows revelations about Serbian student activists being infected with Pegasus and NoviSpy, and coincides with other pressures on Belgrade.

The EU, its members and the U.K. took action against Russian government officials and others while attributing the winter cyberattacks against Poland’s energy grid to the FSB.

Citizen Lab says the phone of a member of Europe’s PEGA Committee was infected twice with Pegasus, the NSO Group spyware that gave the panel its name.

Proofpoint researchers say the group behind the surge, TA416, had turned away from Europe for a few years.

“There can be no mistake about X’s knowledge, and, at best, negligent response to these trends,” the lawmakers wrote to company executives.

The letter comes as countries in Europe have moved over the past year to regulate or mandate legalized access for criminal and national security investigations.

The EU will vote Oct. 14 on a proposal that would use AI or humans to detect child sexual abuse material on their devices.  

ForeScout said one of them warranted rating at the maximum severity level, although DrayTek has issued patches.

In an interview with CyberScoop, Nate Fick also discussed the structure of his office and regions of emphasis.

The attack campaigns show how spyware tech companies have become more akin to nation-state threat actors.