• •Amnesty International identified a zero-day exploit linked to Cellebrite software used to infiltrate an iPhone belonging to a Serbian student activist.
• •The attack utilized a specific vulnerability to bypass device security, marking a shift from traditional forensic access to remote or targeted exploitation.
• •The full scope of the exploit's distribution—specifically which state agencies possess the capability—remains unconfirmed, leaving the scale of potential misuse unclear.

Amnesty International has documented the use of a zero-day exploit tied to Cellebrite technology to compromise a phone owned by a Serbian student activist. Unlike typical forensic tools used by law enforcement for seized hardware, this incident highlights the emergence of sophisticated surveillance methods directed at political figures. However, it remains unclear how widely this specific exploit has been distributed beyond the suspected perpetrator. Whether this indicates a broader trend of commercial exploits filtering down to regional surveillance actors depends on the transparency of Cellebrite's customer audits in the coming months.