It’s the Digital Security Training team at Freedom of the Press Foundation (FPF), with security news that keeps you, your sources, and your devices safe. If someone has shared this newsletter with you, please subscribe here.

First, it’s that time of the fiscal year again. We’re supporting more journalists with digital security than ever. Against the backdrop of congressional maneuvers to kneecap nonprofits and elevated threats to press freedom, it’s getting tough. But we’re tougher. If you can support us, every bit helps: https://freedom.press/donate/

WhatsApp suit against NSO Group confirms government abuses

Israeli spyware vendor NSO Group says its Pegasus malware is built for intelligence and law enforcement groups, but civil society organizations have documented years of government abuses of these tools to target journalists, activists, lawyers, politicians, and civil society members. As part of a 2019 lawsuit filed by WhatsApp, a combination of depositions, subpoenaed WhatsApp messages, and newly released court documents reveal more inner workings from NSO Group’s operations. The documents suggest NSO Group “disconnected” 10 government customers in recent years due to abuse of its services — a clear sign the company understood that civil society is not just crying wolf on government abuses of these tools.

What you can do

  • Update your device: Since the vast majority of spyware attacks aren't very sophisticated, you can protect your device with minimal effort. Simply download and install the latest security updates. My colleague David Huerta wrote an excellent blog on why software updates are so important.
  • Try Lockdown Mode: If you have an iPhone and are at elevated risk of targeted spyware, check out Apple’s Lockdown Mode for more restrictive security settings. Security researchers at Access Now say “Lockdown Mode for the iPhone appears to have blocked some attempts to compromise Apple devices with Pegasus.”
  • Regularly scan for malware: Although not perfect, iVerify for iOS can help scan for less sophisticated malware.
  • Options for Android users: Android users may need additional assistance. The Mobile Verification Toolkit requires some technical knowledge to set up. Amnesty International’s Security Lab and Access Now’s Digital Security Helpline can assist those involved in civil society work.

Updates from our team

  • If you attended last week’s Logan symposium in London and want to connect, we’d love to hear from you. Give us a shout — just reply to this email!
  • For our most recent digital security advice column, my colleague Davis Erin Anderson talks about privacy considerations for your notifications and what you can do to make them work best for you. Read her post!
  • Our former digital security intern, Kevin Pham, is conducting a research study at Tufts University on access barriers to secure file sharing for journalists and civil society members. Participants can enter a raffle to win a $50 gift card by taking part in his research survey. You may also receive a $30 gift card for completing a short task and a 30-minute interview, with the option to donate compensation to a charity, if preferred. Learn more or contact Kevin at [email protected]. Check out the survey. (I used to run studies like this all the time, so I know how challenging this kind of work can be. Help Kevin out!)
  • Reminder: If you’re a U.S.-based journalist or news outlet covering the U.S. election and need safety support, the team at Election Urgent Care is here to help. FPF has joined forces with the Knight Election Hub and an all-star team of safety and legal experts from the Committee to Protect Journalists, the International Women's Media Foundation, Reporters Committee for Freedom of the Press, PEN America, and Aegis Safety Alliance. We’ll provide support for digital, physical, psychological, and legal concerns, from dealing with doxing, threats, and arrests to preparing for risky assignments. To learn more, or to apply from an eligible newsroom for support, check out Knight Election Hub’s Urgent Care.

Our team is always ready to assist journalists with digital security concerns. Reach out here, and stay safe and secure out there.

Best,
Martin

–

Martin Shelton
Deputy Director of Digital Security
Freedom of the Press Foundation