Amnesty International found a zero-day exploit sold by digital intelligence firm Cellebrite used to hack a Serbian student critic of the government. The human rights body had accused Serbia in December of using spyware routinely for wider state control and against civil societies, which led Cellebrite suspending sales to Serbian clients. Amnesty discovered the new case involving a lock screen attack chain for fully patched Android devices, calling it continued evidence of Serbia’s surveillance campaign.

M&S issues update as crippling nationwide IT outage still ongoing – The Sun
Marks & Spencer (M&S) halted online orders in the UK and Ireland following a cyber attack, leading to a 5% drop in share price. Physical