S5 – Episode 007 – The Pegasus Spyware: Privacy Compromised

S5 – Episode 007 – The Pegasus Spyware: Privacy Compromised

Author: Jason Popillion and Kevin Pentecost July 23, 2026 Duration: 44:05

What if someone could unlock your phone without you clicking a link, opening an attachment, or even knowing they'd been there? No warning. No notification. No trace. That's exactly what Pegasus spyware was built to do.

In this episode of Cyber Distortion Podcast, we uncover the extraordinary story behind the world's most sophisticated commercial spyware—a military-grade surveillance platform developed by Israel's NSO Group and sold to governments around the globe under the promise of fighting terrorism and organized crime. Instead, forensic investigators uncovered evidence that Pegasus had been used against journalists, human rights activists, lawyers, political opponents, diplomats, and even heads of state.

We follow the investigation that began with Amnesty International's Security Lab, exploded through the international Pegasus Project, and revealed how zero-click exploits, invisible iMessage attacks, and multiple zero-day vulnerabilities allowed attackers to silently seize complete control of both iPhones and Android devices. Along the way, we examine the FORCEDENTRY exploit, the lawsuits filed by Apple and WhatsApp, the U.S. government's sanctions against NSO Group, and the emergence of an entirely new commercial spyware industry.

More importantly, this isn't simply a story about hacking phones—it's a cybersecurity case study on the weaponization of software vulnerabilities, the collapse of digital privacy, and the growing market for commercial cyberweapons. Pegasus fundamentally changed how governments, security researchers, and everyday users think about mobile security. The question isn't whether your phone can be hacked anymore—it's who can afford to do it.

Join Kevin and Jason as they break it all down with you.


Resources

MUST-READ BOOKS

1. Pegasus: How a Spy in Your Pocket Threatens the End of Privacy, Dignity, and Democracy — Laurent Richard & Sandrine Rigaud

The definitive book on the Pegasus Project investigation from two of the journalists who led the international collaboration. It reveals how Pegasus was deployed around the world and why commercial spyware has become one of the greatest threats to democracy and human rights.

https://us.macmillan.com/books/9781250858675/pegasus

2. This Is How They Tell Me the World Ends — Nicole Perlroth

An award-winning investigation into the global market for zero-day exploits and cyber weapons. Provides critical background for understanding how vulnerabilities like those used by Pegasus become billion-dollar commodities.

https://www.bloomsbury.com/us/this-is-how-they-tell-me-the-world-ends-9781635576057/

3. Sandworm — Andy Greenberg

While focused on Russian cyber operations, this book provides valuable context into nation-state cyber capabilities and how offensive cyber tools continue to evolve beyond traditional espionage.

https://www.penguinrandomhouse.com/books/559677/sandworm-by-andy-greenberg/

4. The Pegasus Project — Forbidden Stories

The original investigative reporting that exposed the leaked list of more than 50,000 phone numbers believed to have been selected for Pegasus targeting.

https://forbiddenstories.org/pegasus-project/


DOCUMENTARIES

The Pegasus Project (PBS FRONTLINE)

An excellent documentary covering the global investigation into Pegasus, featuring interviews with security researchers, journalists, and victims whose phones were compromised.

https://www.pbs.org/wgbh/frontline/

Citizen Lab Research Videos

Presentations and technical briefings explaining the forensic investigation behind Pegasus, FORCEDENTRY, and commercial spyware.

https://citizenlab.ca/


ADDITIONAL RESEARCH & CONTEXT

Amnesty International Security Lab — Pegasus Forensic Investigation

🔗 https://securitylab.amnesty.org/

Citizen Lab — Pegasus Research Collection

🔗 https://citizenlab.ca/

Google Project Zero — A Deep Dive into FORCEDENTRY

🔗 https://googleprojectzero.blogspot.com/

Apple Security Updates

🔗 https://support.apple.com/security

U.S. Department of Commerce — Entity List (NSO Group)

🔗 https://www.bis.doc.gov/

Reuters — Pegasus Spyware Coverage

🔗 https://www.reuters.com/

Wikipedia — Pegasus (Spyware)

🔗 https://en.wikipedia.org/wiki/Pegasus_(spyware)


Audio

• Entering to Unknown

• Legendary March

• Guess

• Problem

 

• Audio Tracks Provided by one of the following:

• Filmora

• Audiostock

• Universal Music for Creators 🎧



Ever feel like the world of cybersecurity is explained in a language only experts understand? That's exactly why Cyber Distortion Podcast Series exists. Hosts Jason Popillion and Kevin Pentecost, both seasoned professionals who hold top certifications like the CISSP, cut through the jargon and distortion to talk about digital safety in clear, practical terms. Each episode feels like a conversation with two colleagues who have been in the trenches-Jason as a CIO/CTO and Kevin as an Information Security Manager-and who genuinely want you to walk away with something useful. You won't just hear abstract theories; you'll get actionable advice that applies whether you're protecting your personal data or responsible for an entire organization's security posture. This podcast demystifies the concepts that matter now, from everyday online habits to broader organizational strategies, making crucial knowledge accessible without oversimplifying the real challenges. Tune in for straightforward discussions that equip you with the understanding to navigate an increasingly complex digital landscape with more confidence.
Author: Language: English Episodes: 50

Cyber Distortion Podcast Series
Podcast Episodes
S2 - Episode 006 – You ARE the Weakest link! [not-audio_url] [/not-audio_url]

Duration: 1:01:17
A long time in the making, this episode on the importance of User Awareness may just be the most important episode we've released so far. Kevin Pentecost and Jason Popillion are security veterans and Certified Informatio…
S2 - Episode 005 – Third Party Risk – It's not Me, It's You! [not-audio_url] [/not-audio_url]

Duration: 1:20:01
HE'S BAAAAAAACK!! In this episode, we RE-visit with our very first guest, Benjamin Hall. Ben has served as a virtual CISO, and serves as Sr. Information Security Consultant at Heartland Business Systems. With experience…
S2 - Episode 004 - "AI and ChatGPT is Scary Sh*t! – Part II" [not-audio_url] [/not-audio_url]

Duration: 43:36
In this MUCH anticipated follow-up to our episode 003 on AI an ChatGPT, expect more mind-numbing and terrifying facts about this incredible new technology! Kevin and Jason wrap up their discussion with Justin "Hutch" Hut…
S2 - Episode 003 - "AI and ChatGPT is Scary Sh*t! – Part I" [not-audio_url] [/not-audio_url]

Duration: 55:03
What in the world does AI and ChatGPT have to do with Cybersecurity? Well, this episode is going to answer that question for you, and so much more!! In today's exciting episode, Jason and Kevin discuss the incredible wor…
S2 - Episode 002 – 2022 Breaches and Some Retrospection [not-audio_url] [/not-audio_url]

Duration: 1:21:06
In this exciting second episode of the new season, we're offering up a buffet of delicious options to feast your incessant little cybersecurity appetites on! BREACHES We start by spending time on 5 of the top breaches th…