Sign in

The Citizen Lab

@citizenlab.ca
13K followers 36 following 249 posts

We are an academic research unit at the University of Toronto investigating novel threats to democracy, human rights, and global security in the digital ecosystem.

PostsRepliesMedia
The Citizen Lab @citizenlab.ca · 23/09/2026
Join senior researcher @wchr.bsky.social at @re-publica.com in Vienna on October 2nd to discuss how government agencies are accessing behavioural data from online advertising for surveillance purposes. Register here: tickets.infield.live/event/re-pub...
0116
The Citizen Lab @citizenlab.ca · 23/09/2026
2/ The second report from the Working Group on the use of mercenaries draws on Citizen Lab research to assess the human rights impacts of cybermercenaries. Read it here: docs.un.org/en/A/HRC/63/31
docs.un.org
Document Viewer
061
The Citizen Lab @citizenlab.ca · 23/09/2026
1/ Two UN reports citing Citizen Lab submissions have been published this month. The first, from the UN High Commissioner for Human Rights, describes digital risks to human rights defenders. Read it here: docs.un.org/en/A/HRC/63/52
docs.un.org
Document Viewer
184
Reposted by The Citizen Lab
Emile Dirks @emiledirks.bsky.social · 22/09/2026
In response to a request for info from the Research Directorate at the Immigration and Refugee Board of Canada, colleagues at @citizenlab.ca & I have written a submission examining the Chinese government's monitoring of Chinese citizens and diaspora members in Canada. citizenlab.ca/submission-t...
citizenlab.ca
Submission to the Immigration and Refugee Board of Canada - The Citizen Lab
The Citizen Lab submitted a response to the Research Directorate at the Immigration and Refugee Board of Canada.
133
The Citizen Lab @citizenlab.ca · 22/09/2026
Join Citizen Lab director @rondeibert.bsky.social in Toronto for his keynote speech at SecTor on October 7. He will be speaking about the Citizen Lab’s decades of work acting as “counterintelligence for civil society.” Register: sector.informafestivals.com/2026/
0108
The Citizen Lab @citizenlab.ca · 21/09/2026
2/ Join senior research associate @kate-ro.bsky.social on September 23 at 3:45 am EST to talk about upholding justice when law enforcement reaches across borders. Register: www.rightscon.org/continues2026/
rightscon.org
RightsCon Continues
The threat to digital rights continues. The work of our community continues. And so does RightsCon. Learn more about the initiatives for 2026
020
The Citizen Lab @citizenlab.ca · 21/09/2026
1/ Citizen Lab researchers are presenting at the @rightscon.org Continues Summit, a 24-hour online event on September 22-23! Senior researcher @jsrailton.bsky.social will be discussing the commercial spyware industry on September 22 at 4:15 pm CEST.
121
The Citizen Lab @citizenlab.ca · 17/09/2026
3/ A report from BlackCore celebrates the success of their Angola training program, demonstrating the damage the influence-for-hire industry can do to an online ecosystem.
173
The Citizen Lab @citizenlab.ca · 17/09/2026
2/ In our brief, we examine BlackCore’s digital infrastructure, including how they construct fake profiles and amplify content, and how they market themselves and their results to clients.
163
The Citizen Lab @citizenlab.ca · 17/09/2026
1/ 🚨 NEW RESEARCH: We identified a training program provided to government employees in Angola by the Israeli influence-for-hire company BlackCore. Read the brief: citizenlab.ca/research/bla...
citizenlab.ca
Research Note: BlackCore’s Influence Operations for Hire - The Citizen Lab
In this research note, we examine the digital infrastructure of BlackCore, an Israeli influence-for-hire company. We describe how we identified a BlackCore campaign consisting of a training program pr...
12914
The Citizen Lab @citizenlab.ca · 14/09/2026
Join @cyn-k.bsky.social tomorrow, September 15th at 7PM ET, for @civictechto.bsky.social Meetup #560. She will present a recent joint brief by @citizenlab.ca and @cancivlib.bsky.social that analyzes the privacy and human rights implications of Bill C-22. Register here: guild.host/events/civic...
012
The Citizen Lab @citizenlab.ca · 10/09/2026
2/ The letter cites the Citizen Lab’s 2020 research into BellTroX’s hack-for-hire operation, which found that it conducted commercial espionage on behalf of clients. Read it here: citizenlab.ca/research/dar...
citizenlab.ca
Dark Basin: Uncovering a Massive Hack-For-Hire Operation - The Citizen Lab
Over the course of our multi-year investigation, we found that Dark Basin likely conducted commercial espionage on behalf of their clients against opponents involved in high profile public events, cri...
050
The Citizen Lab @citizenlab.ca · 10/09/2026
1/ A bipartisan group of U.S. lawmakers have called for three Indian companies that have hacked and stolen data from Americans to be added to the economic sanctions “entity list.” Read the TechCrunch coverage here: techcrunch.com/2026/09/09/g...
techcrunch.com
Group of bipartisan lawmakers ask US government to ban several hack-for-hire firms | TechCrunch
The three Indian companies are accused of using hackers to steal information used to sway litigation.
183
The Citizen Lab @citizenlab.ca · 09/09/2026
2/ Through the experiences of 25 exiled queer women activists from the Global Majority, they uncover a critical “protection gap” in mainstream digital security approaches. Read it here: tsjournal.org/index.php/jo...
tsjournal.org
Security without Safety: Queering Cybersecurity in the Age of Digital Transnational Repression | Journal of Online Trust and Safety
Journal of Online Trust and Safety
020
The Citizen Lab @citizenlab.ca · 09/09/2026
1/ Citizen Lab researchers @noura.bsky.social, Shaila Baran, @mmichae1sen.bsky.social and @sanstis.bsky.social analyze how intersecting identities of gender and sexual orientation shape experiences of digital transnational repression in a special issue of the Journal of Online Trust and Safety.
195
The Citizen Lab @citizenlab.ca · 07/09/2026
📣 Senior researcher @noura.bsky.social will present on taking a “queering cybersecurity” approach to digital transnational repression with the Journal of Online Trust and Safety tomorrow (September 8) at 11am ET. Join: stanford.zoom.us/j/9404579049... 🔐 595654
stanford.zoom.us
Join our Cloud HD Video Meeting
Zoom is the leader in modern enterprise cloud communications.
065
The Citizen Lab @citizenlab.ca · 04/09/2026
Citizen Lab researchers @sanstis.bsky.social, @natynettle.bsky.social, and @katepundyk.bsky.social write in @lawfaremedia.org about the U.K. Supreme Court’s ruling against state immunity in a case involving exiled Bahraini dissidents targeted with spyware. Read: www.lawfaremedia.org/article/u.k....
lawfaremedia.org
U.K. Supreme Court Opens Door for Spyware Victims to Sue Foreign States
The Kingdom of Bahrain cannot claim immunity from a suit by exiled dissidents over harm caused by spyware surveillance on U.K. soil.
0236
The Citizen Lab @citizenlab.ca · 02/09/2026
5/ If you are concerned your iPhone may be targeted with mercenary spyware, we encourage you to use Apple’s Lockdown Mode and seek expert guidance from trusted experts, such as the @accessnow digital security helpline. Read our investigation: citizenlab.ca/research/peg...
citizenlab.ca
Pegasus Spyware Infection of Serbian Pro-Democracy Student Activist - The Citizen Lab
In collaboration with the SHARE Foundation, the Citizen Lab confirmed that the iPhone of a member of Serbia’s student protest movement was infected with Pegasus spyware.
2102
The Citizen Lab @citizenlab.ca · 02/09/2026
4/ Apple patched the iMessage exploit as of iOS iOS 18.4.1, but the continued Apple Threat Notifications indicate that the student movement continues to be aggressively targeted with mercenary spyware.
160
The Citizen Lab @citizenlab.ca · 02/09/2026
3/ Meanwhile, the team from @AmnestyTech has found that NoviSpy spyware is still being deployed against members of the student movement, and that the spyware has been modified in an attempt at greater stealth.
140
The Citizen Lab @citizenlab.ca · 02/09/2026
2/ This is the most recent public Pegasus case, and it comes amidst a critical series of elections in Serbia. At least 11 Serbian pro-democracy campaigners and opposition figures recently received Apple Threat Notifications.
140
The Citizen Lab @citizenlab.ca · 02/09/2026
1/ NEW: an investigation by our collaborator SHARE Foundation reveals widespread spyware targeting Serbia's pro-democracy student movement. The Citizen Lab confirms that an iPhone belonging to a student was infected with Pegasus spyware. Read more: sharefoundation.info/en/share-fou...
sharefoundation.info
SHARE Foundation: Students and Opposition Politicians Targeted by Spyware - SHARE Fondacija
The SHARE Foundation has confirmed that at least 14 people in Serbia were targeted with advanced spyware since at the beginning of 2026 – the largest documented wave of such surveillance in the countr...
12324
The Citizen Lab @citizenlab.ca · 31/08/2026
🔈 Join senior researcher @irenepoet.bsky.social at Data for Policy 2026 on September 8-10. She will be presenting on how AI systems have facilitated the consolidation of state authority differently in India and Vietnam. Register: dataforpolicy.org/dfp26-regist...
151
The Citizen Lab @citizenlab.ca · 20/08/2026
Senior researcher @jsrailton.bsky.social spoke to @techcrunch.com about the “unprecedented” number of Apple users who recently received notifications alerting them to suspected spyware attacks against their devices. Read: techcrunch.com/2026/08/17/u...
techcrunch.com
‘Unprecedented’ number of Apple users received recent spyware alert, say investigators | TechCrunch
Cybersecurity experts who investigate spyware attacks say the number of people who received a recent threat notification from Apple is unusually high.
185
The Citizen Lab @citizenlab.ca · 17/08/2026
📢 @opentechfund.bsky.social's 2026 Information Controls Research Program supporting researchers tackling internet #censorship & #surveillance is accepting applications. As one of the host organizations, we welcome proposals. Learn more and apply by September 7, 2026: citizenlab.ca/call-for-app...
citizenlab.ca
Call for Applications: Information Controls Research Program 2026 - The Citizen Lab
The Information Controls Research Program (ICRP) (formerly known as the “Information Controls Fellowship Program) from the Open Technology Fund (OTF) supports applied research into how authoritarian g...
047
Reposted by The Citizen Lab
Alberto Fittarelli @fittarelli.com · 06/08/2026
As I mention in my comment to this investigation by @jdowsea.bsky.social and @occrp.org, coordinated false reporting is an almost invisible, and therefore incredibly underestimated censorship threat to civil society - and to anyone bothering those who will pay for the service.
01811
The Citizen Lab @citizenlab.ca · 05/08/2026
Citizen Lab researchers @sanstis.bsky.social, @mmichae1sen.bsky.social, and @katepundyk.bsky.social write about how restrictive immigration policies enable transnational repression for @fpcthinktank.bsky.social. Read: fpc.org.uk/immigration-...
fpc.org.uk
Long Read | Immigration Policy: The Backdoor to Transnational Repression - The Foreign Policy Centre
Democratic governments are stepping up efforts to combat transnational repression, but restrictive immigration policies may inadvertently help authoritarian regimes target dissidents.
11411
The Citizen Lab @citizenlab.ca · 31/07/2026
Senior research associate @kate-ro.bsky.social speaks about Canada’s surprising decision to sign the UN Cybercrime Convention with @mgeist.bsky.social, arguing that it has significant implications for human rights and internet freedom. Listen: www.michaelgeist.ca/podcast/epis...
michaelgeist.ca
Episode 277: Kate Robertson on the Risks That Lie Behind Canada's Unexpected Signing of the UN Cybercrime Convention - Michael Geist
The Canadian government’s surprise decision to sign the UN Cybercrime Convention has sparked many questions about the convention, its risks, and what changed over the past nine months between Canada n...
196
The Citizen Lab @citizenlab.ca · 28/07/2026
A recent investigation by @occrp.org found that the co-founder of NSO Group travelled to Panama in 2013 on an Israeli diplomatic passport. Senior researcher @jsrailton.bsky.social notes that it “raises questions about NSO’s connections to the [Israeli] state.” Read: www.occrp.org/en/project/t...
occrp.org
Co-Founder of Controversial Spyware Firm Had Israeli Diplomatic Passport
Spyware company NSO Group’s co-founder Shalev Hulio used an Israeli diplomatic passport to enter Panama in 2013, raising questions over the firm’s claims of independence from the Israeli state.
03119
Reposted by The Citizen Lab
Jon Penney @penney.bsky.social · 27/07/2026
Thrilled to have an opportunity to speak about my new book #ChillingEffects with @justinhendrix.bsky.social, Editor in Chief of @techpolicypress.bsky.social Listen in below!
01210
The Citizen Lab @citizenlab.ca · 24/07/2026
Senior fellow Gary Miller spoke with @capecellular.bsky.social about the exploitation of mobile network vulnerabilities to track US personnel during the Iran war. Watch here: www.youtube.com/watch?v=R9rK...
youtube.com
How Iran Uses Cellular Infrastructure to Target US Military Phones
YouTube video by Cape
095
The Citizen Lab @citizenlab.ca · 20/07/2026
Senior research fellow Gary Miller spoke to @financialtimes.com about attempts to exploit mobile network vulnerabilities to track US personnel during the Iran war. Read: www.ft.com/content/4435...
ft.com
US military smartphones targeted through roaming and ad tech
Cyber attacks tried to track down American personnel in Middle East as Tehran attacked forces in the region
01510
The Citizen Lab @citizenlab.ca · 17/07/2026
Join the Citizen Lab in Calgary at the 26th Privacy Enhancing Technologies Symposium (PETS). Senior researchers @jsrailton.bsky.social and Rebekah Brown will be speaking, and Citizen Lab researchers are presenting their analysis of censorship on Amazon. Register: web-eur.cvent.com/event/fbb91d...
web-eur.cvent.com
Registration Details - PETS 2026
Privacy Enhancing Technologies Symposium 2026
0114
The Citizen Lab @citizenlab.ca · 17/07/2026
WATCH: Last week, the European Parliament had a debate on #spyware after we found that a former MEP's phone was hacked with #Pegasus. The consensus: the crisis is getting worse. @hneumannmep.bsky.social @saskiabricmont.bsky.social @lukassiepermdep.bsky.social @danusenerudova.bsky.social
01811
Reposted by The Citizen Lab
Ron Deibert @rondeibert.bsky.social · 07/07/2026
Taiwanese authorities charge executives who helped China’s cyber spies target ICIJ network The probe corroborates @icij.org & @citizenlab.ca findings that attacks against journalists were part of a coordinated espionage campaign sponsored by Beijing. www.icij.org/investigatio...
icij.org
Taiwanese authorities charge executives who helped China’s cyber spies target ICIJ network - ICIJ
The Ministry of Justice Investigation Bureau probe corroborates ICIJ and Citizen Lab’s findings that attacks against journalists were part of a coordinated espionage campaign sponsored by Beijing.
02920
Reposted by The Citizen Lab
Jon Penney @penney.bsky.social · 07/07/2026
I have a new Op-Ed in @theguardian.com (with Bruce Schneier) on the social chill of AI surveillance. If widely deployed, it will be corrosive to democracy & social progress. We cite my new book #ChillingEffects on how surveillance & tech shapes behavior at scale: www.theguardian.com/commentisfre...
theguardian.com
AI surveillance is being supercharged – and it will chill social progress | Bruce Schneier and Jon Penney
These systems will soon be able to track our public and private lives. But we can make the policy choices to reject it
03216
The Citizen Lab @citizenlab.ca · 03/07/2026
4/ We are not attributing these infections to a particular Pegasus operator at this time, but we note an overlap with a previously-identified campaign targeting Russian and Belarusian-speaking exiled journalists and activists in Europe.
051
The Citizen Lab @citizenlab.ca · 03/07/2026
3/ This case is not the first time that a European member of parliament has had their devices either targeted or hacked with mercenary spyware.
161
The Citizen Lab @citizenlab.ca · 03/07/2026
2/ Kouloglou was infected during key periods of PEGA committee activity, meaning that confidential documents and communications relevant to the committee may have been exposed.
142
The Citizen Lab @citizenlab.ca · 03/07/2026
1/ NEW REPORT: Former Member of the European Parliament Stelios Kouloglou was repeatedly hacked with NSO Group’s Pegasus spyware while serving on the EU committee investigating Pegasus and other spyware abuses in Europe. Full report: citizenlab.ca/research/mem...
citizenlab.ca
Espionage Against the European Parliament: Member of Committee Investigating Spyware Hacked with Pegasus - The Citizen Lab
We found that former Member of the European Parliament Stelios Kouloglou was hacked with Pegasus spyware while serving on the PEGA committee, which investigated Pegasus and other spyware abuses in Eur...
13121
The Citizen Lab @citizenlab.ca · 02/07/2026
In “How to Combat Transnational Repression,” published in @jodemocracy.bsky.social, Citizen Lab researchers @sanstis.bsky.social and @mmichae1sen.bsky.social write about the lack of accountability for perpetrators of transnational repression. Read: www.journalofdemocracy.org/articles/how...
journalofdemocracy.org
How to Combat Transnational Repression | Journal of Democracy
Authoritarians actively threaten, intimidate, and murder exiles and opponents wherever they find them. While justice for victims is hard won, it is possible. Here is how democracies can push back.
01912
The Citizen Lab @citizenlab.ca · 25/06/2026
Senior research associate @emiledirks.bsky.social has been elected to serve as a member of @pencanada.bsky.social's board of directors, chairing the new Digital Threats committee: pencanada.ca/who-we-are/l...
pencanada.ca
Leadership & Staff - PEN Canada
Meet our board members, advisory council, and the PEN Canada staff. Contact us if you have questions or want to get involved.
051
The Citizen Lab @citizenlab.ca · 25/06/2026
5/ Read @accessnow.org's recommendations for companies and states here: www.accessnow.org/cellebrite-r...
accessnow.org
Russia used Cellebrite tech to hack prominent activist
A Citizen Lab investigation confirms evidence Russian authorities used Cellebrite tool to hack prominent Russian activist Andrey Pivovarov after the Cellebrite claimed to have ceased sales to Russia.
043
The Citizen Lab @citizenlab.ca · 25/06/2026
4/ This is just the latest in a long line of abuses of Cellebrite’s technology by autocrats around the globe, including against activists in Kenya and Jordan earlier this year: citizenlab.ca/research/cel...
citizenlab.ca
Not Safe for Politics: Cellebrite Used on Kenyan Activist and Politician Boniface Mwangi - The Citizen Lab
Following the widely-condemned arrest in July 2025 of prominent Kenyan opposition voice Boniface Mwangi, the Citizen Lab analyzed artefacts from devices seized during the arrest. We found that Cellebr...
162
The Citizen Lab @citizenlab.ca · 25/06/2026
3/ Importantly, we found that authorities continued to use Cellebrite for political repression even after the company had cancelled its contracts with Russian customers.
120
The Citizen Lab @citizenlab.ca · 25/06/2026
2/ Our analysis is confirmed by a document prepared by Russian authorities showing that Cellebrite was used to extract information to aid in Pivovarov’s prosecution.
120
The Citizen Lab @citizenlab.ca · 25/06/2026
1/ NEW RESEARCH: We find that Russian authorities used Cellebrite to gain access to activist Andrey Pivovarov’s phone. Full brief: citizenlab.ca/research/rus...
citizenlab.ca
Russia Breaks Into Human Rights Activist's Phone With Cellebrite - The Citizen Lab
We analyzed Russian activist Andrey Pivovarov’s phone, finding that Russian authorities used forensic extraction tools made by Cellebrite to gain access to his device. A document prepared by Russian a...
11815
The Citizen Lab @citizenlab.ca · 22/06/2026
Join senior researcher @noura.bsky.social for “Security Without Safety: Queering Cybersecurity in the Age of Digital Transnational Repression” as part of the University of Zurich's "Confronting Transnational Repression" workshop: www.ema.uzh.ch/en/register/...
ema.uzh.ch
Register | Confronting Transnational Repression: Building Knowledge and Solidarities Across Communities, Civil Society, and Academia | Event Portal | UZH
082
The Citizen Lab @citizenlab.ca · 15/06/2026
Senior fellow @cyn-k.bsky.social writes that Canada’s new AI strategy is reorienting democratic functions “around the false god of AI” in @thewalrus.ca : thewalrus.ca/canada-ai-pl...
thewalrus.ca
Canada Finally Has a National AI Strategy. Experts Hate It | The Walrus
We asked researchers, entrepreneurs, and policy analysts to read the plan so you don’t have to. They found plenty to worry about
2188
The Citizen Lab @citizenlab.ca · 12/06/2026
Senior researcher Luis Fernando García participated in a Conversatorio Regional hosted by @FViaLibre on “Technologies of state surveillance, democratic control, and protection of civil space.” Watch here: www.youtube.com/live/QkpW72p....
youtube.com
¿Cuáles son las tendencias más preocupantes sobre tecnologías de vigilancia en América Latina?
YouTube video by Fundación Vía Libre
021