NSO Group Hit with $168m Fine for WhatsApp Pegasus Spyware Abuse

infosecurity-magazine.com Sep 7, 2026

NSO Group Hit with $168m Fine for WhatsApp Pegasus Spyware Abuse

Curated by Shubham · TechCapsules · Sep 7, 2026

AI-summarised brief · reviewed before publication

A California federal jury awarded Meta $167.254 million in punitive damages and $444,719 in compensatory damages against NSO Group for deploying its Pegasus spyware to hack approximately 1,400 WhatsApp users, including activists, journalists, and diplomats. The verdict follows a six‑year legal battle that began in 2019 when Meta detected and halted an NSO attempt to exploit a zero‑day vulnerability (CVE‑2019‑3568) in WhatsApp’s voice‑calling feature. NGOs and tech firms supported Meta, and the case highlighted the widespread targeting of civil society across 51 countries. The judgment marks the first punitive financial penalty imposed on NSO.

💡 Why It Matters

· The ruling signals that state‑backed spyware can face substantial civil liability, potentially curbing its use against dissenters.
· It also reinforces Meta’s role as a defender of digital privacy and sets a precedent for holding tech vendors accountable for human‑rights abuses.

Capsules Meta

Read full article on infosecurity-magazine.com

WhatsApp doubles music clip length for status updates

WhatsApp has increased the maximum length of music clips that can be added to status updates from 15 to 30 seconds. The change, reported by WABetaInfo, allows users to select up to 30 seconds of a song from the app’s catalog and attach it to a photo or post it directly as a status. A duration picker appears in the music editor, offering multiple time options. The feature is rolling out server‑side; some iOS and Android users already see the new limit, with iOS version 26.35.72 supporting it.

💡 The longer clips give users more creative flexibility, enabling richer storytelling in their status updates. This tweak strengthens WhatsApp’s competitive stance in the social‑media space.

engadget.com · Sep 9

Threads is overhauling its in-app analytics with more details, except for link…

Meta’s Threads has revamped its in‑app analytics, adding AI‑generated summaries that compare a post’s views, reach, likes, and reposts to recent activity. The new insights panel also flags whether metrics are higher, lower, or typical, and identifies which interest‑based communities and audience demographics drive engagement. Users can see peak days and times for reach, and profile‑level summaries highlight overall activity trends. However, the overhaul omits link‑click data, a metric previously available to help creators gauge off‑platform traffic.

💡 By clarifying how algorithmic exposure translates into measurable engagement, Threads empowers creators to fine‑tune content strategy. The removal of link‑click stats signals a shift in the platform’s focus toward internal interactions over external traffic.

techcrunch.com · Sep 8

Meta debuts its Muse AI agent. Will consumers trust it?

Meta unveiled Muse, a personal AI agent that integrates with users’ everyday apps—email, calendars, payments, health, smart home, and more—to perform tasks such as booking travel, sending emails, and making purchases. Powered by Muse Spark, the agent connects via APIs or browser access and is available on the web, iOS, Android, and WhatsApp, with future releases for Meta’s AI glasses. Muse is free initially, with subscription tiers for higher usage, and claims privacy safeguards through a dedicated secure VM. The launch follows an $18 billion settlement over consumer harms.

💡 Muse represents Meta’s pivot from social media to consumer AI, testing whether users will entrust a new platform with deeper personal data after recent regulatory scrutiny. Its success could reshape how everyday digital tasks are automated and set a precedent for privacy standards in AI assistants.

vox.com · Sep 8

The smartphone trap we built for ourselves

Meta recently agreed to pay at least $12.1 billion to settle claims that it deliberately engineered Facebook and Instagram to addict children. The settlement also requires the company to redesign its platforms for younger users, adding daily time limits, overnight lockouts, and restrictions on likes and beauty filters. The move follows growing scrutiny of mandatory QR codes and app‑centric services that have made smartphones indispensable for everyday tasks such as dining, transportation, and government services. The article argues that while algorithmic changes are a start, broader policy shifts are needed to curb smartphone dependence.

💡 The settlement signals a turning point in how tech giants are held accountable for youth addiction, potentially reshaping platform design and user experience for millions of children.

analyticsinsight.net · Sep 8

WhatsApp Features to Know in 2026: Privacy, AI, Messaging Tools

WhatsApp is fundamentally restructuring user identity and privacy protocols in 2026, introducing usernames to allow messaging without exposing phone numbers, though numbers remain required for account registration. Meta opened global username reservations on June 29, 2026, with full rollout scheduled later this year. Handles range from 3 to 35 characters, and no public directory exists, requiring exact handles for contact initiation. To prevent impersonation, Meta is reserving names for public figures early. Concurrently, Advanced Chat Privacy restricts automated data extraction from sensitive conversations, though it does not block screenshots. Security enhancements include passkey adoption, with over one billion users switching from PINs by August 2026. Additionally, Meta AI now features Incognito Chat, launched in May 2026, which utilizes Private Processing for self-erasing, private interactions. These updates represent the most significant architectural shift since end-to-end encryption became standard, moving the platform beyond phone-number-centric identification toward a more privacy-focused, AI-integrated ecosystem for its three billion users.

💡 Decoupling identity from phone numbers dismantles the primary vector for digital harassment and doxxing, fundamentally altering how billions manage personal safety online. This shift forces a reevaluation of trust mechanisms in messaging, prioritizing cryptographic privacy over the convenience of open directory searches.

9to5mac.com · Sep 7

WhatsApp will soon let users chat with up to five third-party AI…

WhatsApp is testing a native integration that lets users link up to five third‑party AI agents to dedicated one‑on‑one chats. After generating an API key within the app, users paste it into their chosen AI platform, enabling the bot to read only the messages exchanged in that specific conversation. The feature, currently available to a limited group of Android testers, does not support group chats, community threads, or end‑to‑end encryption for bot interactions, and WhatsApp warns that AI responses may be inaccurate. Each agent can be personalized with a name and profile picture, and the system restricts the bot from accessing other contacts, media, or chats. Wider rollout is expected soon.

💡 By embedding AI assistants directly into WhatsApp, Meta aims to keep users within its ecosystem while offering a convenient alternative to Telegram’s open‑bot model.