What Happened
A new report from the Citizen Lab has revealed that former Member of the European Parliament Stelios Kouloglou had his mobile device repeatedly hacked with the notorious Pegasus spyware while serving on a committee that was tasked with investigating the abuse of such commercial surveillance tools in the bloc. "Through forensic analysis of his device, we found that the attackers could have had
Why It Matters
According to Citizen Lab and media reports, former MEP Stelios Kouloglou’s iPhone was repeatedly compromised with the commercial Pegasus surveillance toolkit in 2022 and 2023 while he served on the European Parliament’s PEGA committee investigating spyware abuse.[2][1] Pegasus, operated by state or state-linked actors, enabled full device compromise, including access to communications and potentially sensitive committee data.[2][1] These are facts from public reporting on state-level use of advanced spyware, not AI-specific incidents. From a CyberSE.AI perspective, Pegasus exemplifies high-end, targeted malicious use of algorithmically driven surveillance tooling against policymakers, underscoring the need for strict device-hardening, secure communications policies, and governance controls for any AI-enabled or algorithmic tools used in parliamentary, corporate, or critical-infrastructure contexts.
CyberSE Analysis
This signal maps to malicious AI use. Organizations using AI agents, LLM APIs, SaaS integrations, or sensitive data workflows should review whether this class of issue could create unauthorized tool execution, data leakage, weak approval gates, or unmanaged supply-chain exposure.
Recommended Actions
- Restrict AI agent tool permissions and production write paths.
- Review sensitive data access across prompts, logs, embeddings, memory, and SaaS integrations.
- Add human approval workflows for high-impact or state-changing actions.
- Run prompt injection and indirect prompt injection tests against affected workflows.
- Document the owner, control gap, and remediation deadline for this risk class.
Source
https://thehackernews.com/2026/07/european-parliament-member.html