Amnesty International's Security Lab publishes technical investigations into spyware, surveillance, and phone forensics used against activists and journalists.
HN links it as the primary source for reports on Predator, Pegasus, and Cellebrite exploits, such as the Serbian activist case.
Apple advise whom to contact on their website for guidance, but they are of course not alone in dispensing this and similar advice.
Apple:
"If you have received an Apple threat notification We strongly suggest you enlist expert help, such as the rapid-response emergency security assistance provided by the Digital Security Helpline at the nonprofit Access Now. Apple threat notification recipients can contact the Digital Security Helpline 24 hours a day, seven days a week through their website. Outside organizations do not have any information about what caused Apple to send a threat notification, but they can assist targeted users with tailored security advice."
https://support.apple.com/en-lamr/102174
Amnesty International:
"The Access Now Helpline and other Security Lab civil society partners are also equipped to support individuals who have received these Apple notifications."
https://securitylab.amnesty.org/latest/2024/04/apple-threat-notifications-what-they-mean-and-what-you-can-do/
Israeli malware companies also use targeted ads to use drive-by exploits to infect people's devices using ad networks based on IP addresses:
https://securitylab.amnesty.org/latest/2025/12/intellexa-leaks-predator-spyware-operations-exposed/
The fact that we still just allow arbitrary 3rd party code to run through ad networks is bizarre.
Cellbrite police forensic tools used to secretly unlock a phone then infected with Serbian government spyware.
Full report at: https://securitylab.amnesty.org/latest/2024/12/serbia-a-digital-prison-spyware-and-cellebrite-used-on-journalists-and-activists/
Another Ars [dupe]:
Actual report https://securitylab.amnesty.org/latest/2025/02/cellebrite-zero-day-exploit-used-to-target-phone-of-serbian-student-activist/ (https://news.ycombinator.com/item?id=43205273)
You can read our whole technical analysis on Indonesia here: https://securitylab.amnesty.org/latest/2024/05/a-web-of-surveillance/