The ruling represents a significant victory for privacy advocates and those opposing NSO Group's controversial Pegasus software. The Israeli company has become the most prominent example of the largely hidden spyware industry, which governments increasingly employ to monitor dissidents, journalists, and politicians. NSO Group has consistently rejected criticism, arguing that its Pegasus spyware has been used beneficially, such as in capturing high-profile criminals.

This court decision marks the latest development in legal proceedings that began in 2019, Politico reported. The ruling requires NSO Group to pay WhatsApp punitive damages of around $167 million in addition to more than $440,000 in compensatory damages following one day of jury deliberation, a Meta spokesperson said.

The case stems from an operation connected to NSO Group that attempted to exploit video calling systems and deliver malware to approximately 1,400 WhatsApp users in 2019, many working for civil society organizations, Politico reported. WhatsApp filed a legal complaint after discovering the scheme.

NSO Group had previously been found liable for hacking the WhatsApp user accounts, establishing a precedent for organizations targeted by spyware to take legal action against companies that create such malicious software.

Meta published a post shortly after the ruling celebrating the victory and indicated that WhatsApp will seek a court order to "prevent NSO from ever targeting WhatsApp again." The post added that Meta will make an unspecified donation to digital rights organizations that work to expose spyware abuses. Additionally, WhatsApp plans to release transcripts of deposition videos from NSO Group executives and others to help researchers understand the full extent of spyware use globally.

"Today's verdict in WhatsApp's case is an important step forward for privacy and security as the first victory against the development and use of illegal spyware that threatens the safety and privacy of everyone," the post reads.

Apple had also filed a lawsuit against NSO Group, seeking damages for spyware used against its customers. However, Apple ultimately dropped the case last year after concluding that pursuing it might expose sensitive Apple user data.

Gil Lainer, vice president of global communications for NSO Group, said in a statement Tuesday that the decision is "another stope in a lengthy judicial process," and that "we firmly believe that our technology plays a critical role in preventing serious crime and terrorism and is deployed responsibly by authorized government agencies."

"We will carefully examine the verdict's details and pursue appropriate legal remedies, including further proceedings and an appeal," Lainer said, adding that the company "remains fully committed to its mission to develop technologies that protect public safety" while working within legal frameworks.

NSO Group was added to the Commerce Department's entity list in 2021, making it difficult for the company to conduct business in the US. Meanwhile, the European Parliament has established a committee to investigate Pegasus use across EU nations.

The post Israeli spyware firm slapped with massive fine over alleged WhatsApp hacks appeared first on www.israelhayom.com.

A few weeks ago, an envelope from the American embassy arrived in Meir's (pseudonym) mailbox. "Inside were personal letters for me, my wife, and each of my children," he recounts.

"In the letters, we were notified that all our US visas had been confiscated, and that we shouldn't dare try to enter America. The letter also 'strongly recommended' that we bring our passports to the American embassy so they could physically remove the visas. My son was supposed to study for a semester at an American university, which won't happen now, and my wife works for an American company. How can I explain to them that she is not approved to enter the US?" Meir wasn't given an official reason for revoking his and his family members' visas, but he doesn't need one. Meir is a senior executive at an Israeli offensive cyber company, and he's far from the only one in this industry whose US visa has been revoked.

As we are revealing for the first time, recently more and more employees at Israeli offensive cyber companies have been receiving letters from the American embassy with similar notifications about the cancellation of their visas and those of their family members, according to senior sources in the industry.

"It's an industry that's collapsing"

This phenomenon, which threatens the future of an industry already in crisis, has remained below the radar until now because most workers whose visas have been canceled prefer not to disclose the matter, fearing they will be fired or struggle to find work in the field. "Do you know what it means for a high-tech worker to have their American visa taken away?" says an industry source. "It's a death blow and grounds for dismissal."

In the past two and a half years, the Americans have taken a series of steps that have caused companies like NSO and Candiru to lose customers and employees, and other companies in the industry, such as Quadream, to shut down completely.

According to testimonies received by Israel Hayom, dozens of industry employees, including "vulnerability" researchers who form the spearhead of offensive cyber, have recently decided to move abroad, where they work for foreign companies.

National interests and commercial struggles involving technology giants are intertwined. According to several Israeli sources we spoke with, there are also antisemitic and anti-Israeli tendencies among senior officials in Washington.

According to several senior executives in the local offensive cyber industry, the State of Israel has not done enough to protect it and has abandoned it to American interests. "We have an entire industry that's simply collapsing," says one of them. "We're businesspeople, but we're not just losing money. Israel is losing an incredible security capability here, and the state is doing nothing to prevent it."

The post 'Don't even try to come': US visa revocation targets Israeli cyber industry appeared first on www.israelhayom.com.

In a significant advancement for artificial intelligence technology, OpenAI launched Sora Turbo on Tuesday, introducing a faster and more capable version of its text-to-video generation system. The platform, available now at Sora.com, allows users to create high-definition videos directly from written descriptions.

Video Creation Capabilities The new system generates videos up to 1080p resolution with durations extending to 20 seconds. Users can choose between widescreen, vertical, or square formats, while also having the ability to incorporate and blend existing assets into their creations.

User Interface and Features OpenAI has developed a comprehensive storyboard tool enabling precise frame-by-frame control. The platform features regularly updated feeds showcasing community-generated content, providing inspiration and examples of the technology's capabilities.

Subscription Options ChatGPT Plus subscribers receive Sora access as part of their existing membership, with a monthly allowance of:

• 50 videos at 480p resolution
• Option for fewer videos at 720p quality

Pro subscribers benefit from:

• 10x increased usage capacity
• Higher resolution options
• Extended video durations

Safety Measures and Verification To ensure responsible deployment, OpenAI has implemented several key safeguards:

• C2PA metadata integration for origin verification
• Default visible watermarks
• Internal content verification system
• Restrictions on uploads featuring people
• Blocks on potentially harmful content

Current Limitations The platform acknowledges certain constraints in its current form:

• Occasional challenges with physics simulations
• Difficulties maintaining complex actions over time
• Ongoing work on cost efficiency

"We're introducing our video generation technology now to give society time to explore its possibilities and co-develop norms and safeguards," an OpenAI spokesperson stated. The company plans to introduce tailored pricing options for different user categories in early 2025.

The post OpenAI's Sora Turbo transforms text into instant video content appeared first on www.israelhayom.com.

Iranian intelligence services have assembled comprehensive profiles of thousands of Israelis, identifying them as potential targets in both domestic and international operations, security sources reveal. Several hundred individuals have been designated "high-risk" targets, with some receiving explicit threats from Iranian operatives. The scope of targeting encompasses current and former defense officials, academics, and scientists, Israel Hayom has learned.

This systematic campaign, sustained for more than a decade, represents Iran's calculated response to a series of assassinations of Iranian scientists and officials attributed to the Mossad and Israel. Tehran has retaliated by establishing terror cells across multiple countries, seeking to strike Israelis residing in or traveling to these locations.

Planned attacks have been uncovered in Turkey, Azerbaijan, Thailand, and several Western European nations. Most were prevented through timely intelligence sharing between Israel and local security agencies, resulting in real-time arrests of Iranian terror cells and operatives across multiple jurisdictions.

The operation has seen significant expansion in recent years, propelled by Iran's advancing cyber capabilities. This technological sophistication enables dual-track operations: enhanced gathering of intelligence about Israeli targets and accelerated recruitment of operatives, who initially may be unaware of their Iranian handlers.

Iranian operatives have exploited vulnerabilities in databases, phones, and computers to harvest comprehensive personal details of thousands of Israelis – including passport data, identification numbers, residential addresses, email accounts, mobile numbers, family information, employment details, and social networks.

This intelligence enables precise tracking of targets' movements and future plans, allowing Iran to identify optimal attack opportunities. Such surveillance methods, particularly mobile device infiltration, is believed to have been carried out by the Iranian cell that assassinated Chabad Rabbi Zvi Kogan in the UAE, whose body was discovered on Sunday.

Device compromise typically occurs through deceptively innocent text message links or calls from unknown numbers, which, when engaged with, grant remote access to mobile devices and their stored data.

While most monitored individuals reside in Israel, Iran has made direct contact with several targets, issuing explicit threats. Some received mock "birthday greetings" for themselves or family members, including ominous warnings about not reaching their next birthday. The surveillance extends to defense establishment personnel, including senior officials.

Iran's recruitment efforts have intensified markedly. The cell responsible for Kogan's killing reportedly operated from Uzbekistan, with similar cells using various nationalities believed to be active globally. Security forces recently arrested one such cell in Sri Lanka planning attacks against Israelis, and yesterday's upgraded travel warning for Thailand likely reflects similar intelligence.

Particularly concerning is Iran's successful large-scale recruitment within Israel itself. Recent weeks have exposed multiple cells recruited remotely, operating under Iranian direction for financial gain to gather intelligence on security installations and specific individuals. Some received instructions to begin practical preparations for attacking Israeli targets. Arrests include Israeli Jews and Arabs, plus Palestinian residents of east Jerusalem.

The domestic targeting operation focuses on several hundred "high-risk" individuals, including current and former senior defense officials, academics across various fields, and scientists. All have received security agency warnings and instructions to maintain heightened vigilance while avoiding unnecessary international travel.

Intelligence assessments project Iran will escalate these efforts imminently, driven by mounting losses in the current war – both direct casualties and damage to its proxies, particularly Hezbollah in Lebanon and Hamas and Palestinian Islamic Jihad in Gaza. While the Shin Bet and other security agencies have successfully thwarted Iranian attempts thus far, Tehran's massive investment in personnel, funding, and technology, combined with the discovered willingness of some Israelis to collaborate with Iranian handlers, creates potential for successful attacks both within Israel and abroad.

The post Iranian intelligence targets thousands of Israelis; this is what you need to know appeared first on www.israelhayom.com.

In an exclusive interview with Israel Hayom, cybersecurity expert Rafael Franco reveals the escalating cyber threats facing Israel. With daily attacks causing billions in economic damage, Franco warns of a potential catastrophic strike on critical infrastructure, highlighting the dangerous collaboration between Iranian and Russian cyber capabilities.

Since the beginning of the Iron Swords war, Israel has been grappling with a daily wave of thousands of cyber attacks, primarily from pro-Palestinian and Iranian sources. A report published about a month ago by Israel's National Cyber Directorate estimates the economic damage from these attacks at no less than 12 billion shekels per year.

To understand the scale and significance of the cyber front Israel is facing, one need only look at the attacks carried out in recent weeks. About two weeks ago, the pharmaceutical company Rekah was forced to shut down its distribution system due to security breach concerns. Prior to that, a real estate website was disabled following a similar attack, and in an equally serious incident that occurred about a month ago, hackers breached the databases of the leading law firm Goldfarb Seligman.

In a conversation with Israel Hayom, Rafael Franco, founder and CEO of the cyber crisis management company Code Blue and former Deputy Head of the National Cyber Directorate, assesses that "despite the damage they caused, these attacks have actually made the Israeli economy's recovery capacity much more efficient. We see businesses that were attacked managing to return to routine relatively quickly, which is very important."

Franco states, "Despite this improved recovery capability, Israel still faces a critical strategic vulnerability: the centralized management of our national infrastructure. How many 'Israel Electric Corporation' are there? How many 'Mekorot' [Israel's water company] companies are there? The country consists of a few companies that are the exclusive providers of strategic infrastructures."

"A massive cyberattack, one that disrupts the supply of electricity or water flow in Israel, is an event that can disrupt an entire country. If in the past Iranian efforts focused mainly on small and medium Israeli organizations with low levels of defense and awareness, in recent years Iran has been making enormous efforts to carry out a critical infrastructure attack against national companies," he claims.

"An event of this magnitude, if successful, could lead to a real disaster. Additionally, the Iranians understand very well how much of a moral blow this would be, causing enormous damage to the State of Israel and its citizens," Franco explains.

How close are the Iranians to carrying out such an attack?

"In recent months, starting from October, we have indeed witnessed a dramatic increase in attack attempts against various entities in the country, some more successful than others. So far, attempts to damage infrastructure have not really succeeded, and the main impact has been on medium-sized organizations and below.

"Although there has not yet been physical damage, the Iranians have managed to break into the systems of organizations of great importance, including medical institutions and academic institutions. They have managed to get their hands on a lot of information, which, although not strategic, is enough to cause economic damage to the economy.

"Let's be clear: while these recent attacks may appear to be of Palestinian origin, they're actually being executed by Iranian operatives with Russian strategic guidance."

How has Russian support strengthened the Iranian cyber array?

"Let's start with the fact that even before Tehran strengthened its strategic connection with Moscow, Iranian technology and research capabilities were considered relatively high, with the University of Tehran ranked among the top 500 universities in the world according to the Shanghai Index. Alongside these capabilities, the development in cyber in the last two years is a direct result of the strategic connection with Russia.

"In exchange for Tehran's unprecedented export of drones and weapons to Moscow, the Russians are enhancing and supporting Iranian cyber capabilities. This connection has developed the Iranian cyber array and led to its construction as an important and central factor in the campaign against Israel.

"The Russians, for their part, have long understood how critical psychological warfare and extensive use of fake news is in undermining enemy resilience, and the Iranians have adopted these tactics. Quite a few attacks make use of fake news and attempts to polarize Israeli public discourse."

How prepared are we for the next attack?

"The war has led the Israeli cyber industry to a boom it hasn't experienced for a long time, due to constant friction with attackers and the incorporation of Israeli creativity. The proof of this is the almost bi-weekly number of exits of Israeli cyber companies.

"However, the rapid advancement of Iranian cyber capabilities necessitates a shift in how we approach cybersecurity across our entire economy. A structured strategy, and consistent and clear guidelines through all bodies and factors in the Israeli economy, are critical to the continuous functioning of the State of Israel. Awareness of the threat, along with proper emergency preparedness that will allow rapid recovery from cyber attacks, is what will make the chances of Iranians significantly harming Israeli society lower."

The post 'A massive cyberattack can disrupt all of Israel' appeared first on www.israelhayom.com.

Despite the defense challenges, Israel's high-tech cyber security sector continues to thrive on the global stage. A delegation of 35 Israeli cyber companies participated in the prestigious RSA Conference earlier this month in San Francisco, the world's leading cyber security event.

Their presence highlighted the cutting-edge innovations Israeli startups are bringing to the rapidly evolving cyber threat landscape. As artificial intelligence is increasingly integrated across industries, malicious actors are exploiting these technologies for large-scale attacks.

"The vast majority of organizations worldwide are adopting AI-based technologies extremely quickly, but security is lagging behind," Elad Shulman, co-founder and CEO of Lasso Security, one of the AI security startups that were part of the conference, told Israel Hayom. "This is one of the hottest areas in software today, and Israeli startups like us are already leading the way."

Shulman said multinational corporations and investors alike are eagerly seeking out the unique expertise of Israeli cyber firms. Some 30% of companies using AI have already suffered breaches related to the emerging threat.

David Carmiel, CEO of Kela cyber threat intelligence platform, offered a proactive defense service to safeguard AI systems. "Through our solution, we can train and test AI capabilities while preventing misuse, allowing clients to get ahead of constantly evolving cyber threats," he explained.

Carmiel emphasized the importance of Israel's presence at RSA, saying, "With many companies avoiding travel to Israel, participation was crucial to strengthen our economy and highlight our cybersecurity prowess."

The delegation's success underscores the growing dominance of Israel's cybersecurity industry. According to the Israel Export Institute, the sector broke records in 2023 with an estimated $25 billion in exports, comprising one-third of Israel's total high-tech exports.

"We are proud to have facilitated over 440 meetings for these companies with potential investors, clients, and trade representatives worldwide in an exposure event in collaboration with NTT, who hosted us at their offices in San Francisco, and Plug and Play, who assisted in marketing the event as part of the RSA conference" Nili Shalev, CEO of the Export Institute, said. "Especially now, we are committed to providing our exporters the support to access global markets."

The post Israeli cyber startups take center stage at RSA conference appeared first on www.israelhayom.com.

The United States has recently conducted a cyberattack against an Iranian military ship in the Red Sea and the Gulf of Aden that had been collecting intelligence on cargo vessels, NBC News reported on Thursday, citing three US officials.

Follow Israel Hayom on Facebook, Twitter, and Instagram

The cyberattack took place a week ago as part of a government response to a drone attack by Iranian-backed militias in Iraq that killed three US service members in Jordan late last month and wounded dozens of others, the report said.

NBC reported that the operation was intended to inhibit the ship's ability to share intelligence with Houthi terrorists in Yemen.

The Iran-aligned Houthi, who control the most populous parts of Yemen, have launched a wave of exploding drones and missiles at commercial vessels in the Red Sea and Gulf of Aden in recent weeks, calling it a response to Israel's military operations in Gaza and a show of solidarity with Palestinians.

The post US reportedly conducts cyberattack on suspected Iranian spy ship appeared first on www.israelhayom.com.

Following recent cyber attacks on Israeli targets, Israeli companies are reportedly turning to a company called Faddom due to what it calls "hybrid and agentless application dependency mapping IT software" that can act in a proactive way to prevent the targeting of dormant servers.

Follow Israel Hayom on Facebook, Twitter, and Instagram

"Faddom's application dependency mapping tool maps entire IT environments – both on-premises and in the cloud – and identifies dependencies between servers and applications to get a holistic picture of an IT network's connections," the company said in a statement, noting that some of the large firms in Israel have asked for its services, including some that deal with insurance and technological innovation.

"The IT infrastructure maps appear in as little as 60 minutes, and they identify dormant servers," it said. "In addition to helping with proactive cybersecurity, the technology helps organizations by assisting with micro-segmentation planning to limit the severity of cyber attacks when they occur," stressing that mapping one's IT infrastructure optimizes the company's resources and could save a lot of money.

Aviv Hooker, co-founder and CRO of Faddom, stressed that "in a dynamic reality, the ability to keep an eye on the computing environment and know what is happening in real time is critical to managing a joint routine in organizations."

The post Cyber attacks put new spotlight on Faddom for its proactive defense of dormant servers appeared first on www.israelhayom.com.

The Islamic Republic marked the 44th anniversary of the Iranian revolution on Saturday with state-organized rallies, as anti-government hackers briefly interrupted a televised speech by President Ebrahim Raisi.

Raisi, whose hardline government faces one of the boldest challenges from young protesters calling for its ouster, appealed to the "deceived youth" to repent so they can be pardoned by Iran's supreme leader.

Follow Israel Hayom on Facebook, Twitter, and Instagram

His live televised speech was interrupted on the internet for about a minute, with a logo appearing on the screen of a group of anti-Iranian government hackers that goes by the name of "Edalate Ali (Justice of Ali). A voice shouted "Death to the Islamic Republic."

On the anniversary's eve Friday night, state media showed fireworks as part of government-sponsored celebrations, and people chanted "Allahu Akbar! (God is Greatest!)". However, many could be heard shouting "Death to the dictator!" and "Death to the Islamic Republic" in videos posted on social media.

Nationwide protests swept Iran following the death in September of 22-year-old Mahsa Amini in the custody of the country's morality police.

Security forces have responded with a deadly crackdown on the protests, among the strongest challenges to the Islamic Republic since the 1979 revolution ended 2,500 years of monarchy.

On Sunday, Supreme Leader Ayatollah Ali Khamenei issued an amnesty covering a large number of prisoners, including some arrested in recent anti-government protests.

Rights group HRANA said dozens of political prisoners and protesters, including several prominent figures, had been freed under the amnesty but that the exact conditions of their release were not known.

Rights activists have expressed concern on social media that many may have been forced to sign pledges not to repeat their "offenses" before being released. The judiciary denied this on Friday.

Government television on Saturday aired live footage of the state rallies around the country. In Tehran, domestic-made anti-ballistic missiles, a drone, an anti-submarine cruiser, and other military equipment were on display as part of the celebrations.

"People have realized that the enemy's problem is not woman, life, or freedom," Raisi said in a live televised speech at Tehran's Azadi Square, referring to the protesters' signature slogan.

"Rather, they want to take our independence," he said.

His speech was frequently interrupted by chants of "Death to America" - a trademark slogan at state rallies. The crowd also chanted "Death to Israel."

Subscribe to Israel Hayom's daily newsletter and never miss our top stories!

The post Anti-Iranian government hackers interrupt the 44th anniversary of revolution appeared first on www.israelhayom.com.

Unidentified operatives have been using a fitness tracking app to spy on members of the Israel Defense Forces, according to a report by The Guardian on Tuesday. 

Follow Israel Hayom on Facebook, Twitter, and Instagram

Using Strava, the operatives tracked the members' movements across bases around Israel and on official business trips, the paper said. The matter was discovered by the FakeReporter open-source intelligence outfit, which "contacted Strava, and they formed a senior team to address the issue."

The app allows anyone to create and compete over so-called "segments," short runs, or bike rides. According to The Guardian, users can define a segment after uploading it from the app, but can also upload GPS recordings from other products or services. By placing fake running segments inside IDF bases, the operatives are said to have kept tabs on individuals who were exercising on site.  "In one example seen by the Guardian, a user running on a top-secret base thought to have links to the Israeli [alleged] nuclear program could be tracked across other military bases and to a foreign country," the Guardian reported.

"By exploiting the capability to upload engineered files, revealing the details of users anywhere in the world, hostile elements have taken one alarming step closer to exploiting a popular app in order to harm the security of citizens and countries alike," Director of FakeReporter Achiya Schatz said. 

Strava said in a statement, "We take matters of privacy very seriously and have been made aware by an Israeli group, FakeReporter, of a segment issue regarding a specific user account and have taken the necessary steps to remedy this situation."

The IDF issued the following statement in the wake of the report: "The IDF, through all its various units, is well aware of the emerging threats online. In order to deal with them, and in the wake of previous events like that mentioned, those serving in sensitive posts get occasional refreshers on the procedures."

Subscribe to Israel Hayom's daily newsletter and never miss our top stories!

The post Report: IDF troops in sensitive locations exposed by fitness app appeared first on www.israelhayom.com.