Researchers Find Israeli-Made Spyware Deployed across Armenia

A man walks past the logo of the Israeli firm NSO Group at one of its branches in the Arava Desert of Israel on July 22, 2021. (Reuters)
A man walks past the logo of the Israeli firm NSO Group at one of its branches in the Arava Desert of Israel on July 22, 2021. (Reuters)
TT

Researchers Find Israeli-Made Spyware Deployed across Armenia

A man walks past the logo of the Israeli firm NSO Group at one of its branches in the Arava Desert of Israel on July 22, 2021. (Reuters)
A man walks past the logo of the Israeli firm NSO Group at one of its branches in the Arava Desert of Israel on July 22, 2021. (Reuters)

Researchers have discovered Israeli-made Pegasus phone hacking software deployed against targets across Armenia, including reporters at a US government-funded news organization, a report released on Thursday found.

A team of researchers from digital rights group Access Now, human rights organization Amnesty International, Canadian internet watchdog Citizen Lab, Armenian digital defense group CyberHUB-AM and independent researcher Ruben Muradyan, said they had confirmed at least 12 cases in which espionage software made by Israel's NSO Group had been used against Armenian officials, journalists and organizers.

What researchers were able to confirm "is the tip of the iceberg," said Natalia Krapiva, the tech-legal counsel for Access Now. "The targeting was quite extensive."

Pegasus is one of many advanced espionage tools that affords hackers sweeping access to their targets' smartphones, allowing them to record calls, intercept messages and even transform the phones into portable listening devices.

Researchers, lawmakers, and journalists have repeatedly accused the technology's maker, Israel-based NSO Group, of helping governments spy on political opponents. In 2021, the company was blacklisted by the US government over human rights concerns.

In an email, NSO Group said it was unable to address the specific allegations made by the coalition of researchers but that it would "investigate all credible allegations of misuse".

The company has previously disputed accusations of wrongdoing, saying its software is used to fight terrorism and serious crime.

One of the alleged Armenian victims of NSO's spyware said those explanations do not reflect reality.

"That's a kind of ridiculous umbrella for the companies that create these products and the governments that use them," Armenian opposition broadcaster Samvel Farmanyan told Reuters.

He added that his targeting was "totally unacceptable (and had) nothing to do with the prevention of any type of crime or terrorism."

Azerbaijan denies responsibility

The researchers said they believed neighboring Azerbaijan, which has fought several wars with Armenia over the disputed chunk of territory known as Nagorno-Karabakh or Artsakh, was likely responsible for the hacking activity.

That's in part because of "extensive evidence" that Azerbaijan's government has previously used Pegasus against its domestic opponents, said Amnesty's Donncha O Cearbhaill, referring to a 2021 investigation by Amnesty and other partners that found hundreds of Azeri phone numbers had been selected for targeting with Pegasus spyware.

The Azeri Embassy in London said in a statement that Azerbaijan "does not engage in such practices" and "does not spy on foreign citizens".

The Armenian government has in the past been implicated in the deployment of phone hacking software, including in a report published last year by Alphabet's Google.

While that report pointed to a different spyware, known as Predator, several Pegasus victims in Armenia said they feared their own government was behind the recent surveillance.

The Armenian Embassy in London said its government rejected the alleged use of spyware at the "highest level".

"Prime Minister Nikol Pashinyan made a strong public statement categorically rejecting the circulating information that the authorities used spyware against opponents and/or journalists," it said in a statement.

Pashinyan and family members had also received messages warning that their devices may have been compromised, it added.

Reuters spoke to several alleged victims identified by the researchers. All said Apple Inc had sent them warnings in 2021 that their iPhones were at risk from spyware. They later discovered traces of Pegasus on their devices through forensic analyses.

Two of them were journalists with the US government-funded Radio Free Europe/Radio Liberty (RFE/RL), something RFE/RL executive Patrick Boehler said was "truly terrifying and appalling".

"If we cannot protect our sources, it has consequences for the depth and breadth of our journalism," he said.

Other alleged victims included Varuzhan Geghamyan, an academic and expert on Armenian-Azeri relations, and Ruben Melikyan, a lawyer and human rights activist.

They all condemned the spying.

"Psychologically it's devastating," said Farmanyan, the broadcaster.



CEO: Amazon Cloud Capacity Sold Out Through 2027

FILE PHOTO: Amazon CEO Andy Jassy speaks during an Amazon Devices launch event in New York City, US, February 26, 2025. REUTERS/Brendan McDermid/File Photo
FILE PHOTO: Amazon CEO Andy Jassy speaks during an Amazon Devices launch event in New York City, US, February 26, 2025. REUTERS/Brendan McDermid/File Photo
TT

CEO: Amazon Cloud Capacity Sold Out Through 2027

FILE PHOTO: Amazon CEO Andy Jassy speaks during an Amazon Devices launch event in New York City, US, February 26, 2025. REUTERS/Brendan McDermid/File Photo
FILE PHOTO: Amazon CEO Andy Jassy speaks during an Amazon Devices launch event in New York City, US, February 26, 2025. REUTERS/Brendan McDermid/File Photo

Amazon CEO Andy Jassy said on Friday that Amazon Web Services' cloud computing capacity is largely sold out through 2027, with significant commitments extending into 2028, on growing demand for AI infrastructure.

In a video podcast with Andreessen Horowitz co-founder Ben Horowitz and general partner Erik Torenberg, Jassy said Amazon is struggling to keep pace ⁠with the insatiable ⁠demand from AI labs and enterprises.

Earlier this year, Amazon had said it would spend about $220 billion in capital expenditure for 2026.

According to Reuters, Jassy said the ⁠company "could invest a lot more and it wouldn't be a bad use of capital," considering cloud-computing capacity for 2026 is already sold out.

"2027 is largely sold out. We always leave a certain amount for on demand and our inference service bedrock, or EC2, but largely sold out ⁠all ⁠the big chunks. A good chunk of 2028 is sold out," he said.

EC2 is an AWS service that provides cloud servers for running applications, while Bedrock gives customers access to AI models to build generative AI applications.

Amazon is scheduled to report third quarter results on October 29.


New ‘Scentronic’ Technology Can Detect and Transmit Aromas Remotely

Ohio State University researcher Chunyu Yang wears a prototype odor generator device which is part of a technology called Scentronic that can detect scents and transmit them remotely, at Columbus, Ohio, on June 13, 2025, in this image released October 21, 2026. (Shaoru Cheng/Handout via Reuters)
Ohio State University researcher Chunyu Yang wears a prototype odor generator device which is part of a technology called Scentronic that can detect scents and transmit them remotely, at Columbus, Ohio, on June 13, 2025, in this image released October 21, 2026. (Shaoru Cheng/Handout via Reuters)
TT

New ‘Scentronic’ Technology Can Detect and Transmit Aromas Remotely

Ohio State University researcher Chunyu Yang wears a prototype odor generator device which is part of a technology called Scentronic that can detect scents and transmit them remotely, at Columbus, Ohio, on June 13, 2025, in this image released October 21, 2026. (Shaoru Cheng/Handout via Reuters)
Ohio State University researcher Chunyu Yang wears a prototype odor generator device which is part of a technology called Scentronic that can detect scents and transmit them remotely, at Columbus, Ohio, on June 13, 2025, in this image released October 21, 2026. (Shaoru Cheng/Handout via Reuters)

People can readily share images and sounds digitally, as evidenced by the billions of smartphones in use globally that often overload the human senses of sight and hearing. But smell generally remains missing from remote communication. That could soon change.

Researchers have developed technology that features an electronic nose that recognizes certain smells, like the distinctive aroma of coffee, and then instructs a small and wearable remote device to release scent molecules matching it. The digital communication can take place at any distance, from across the room to around the world.

"In simple terms, it connects 'smelling something here' with 'recreating the corresponding smell somewhere else,'" said Chunyu Yang, an Ohio State University doctoral student in materials science and engineering and lead author of a study describing the technology published in the journal Science Advances.

"The idea is to add smell to the visual and audio information we already share remotely, making those experiences more engaging," Yang said.

The researchers call this latest development in the field of digital scent technology "Scentronic."

"What makes Scentronic ‌different is that ‌it brings odor sensing and generation together for remote sharing. To the best of our knowledge, ‌our ⁠study is the ⁠first to explore this integration in a compact platform for remote odor sharing," Yang said.

The researchers created an e-nose, a device that uses an array of gas sensors to detect chemical compounds associated with different odors. A machine-learning model then classifies odors that the e-nose has been trained to recognize — cake, coffee and oranges.

The technology uses an online platform to transmit the odor information to a scent generator, which then releases fragrances to recreate the aroma at the receiving end. The scent molecules themselves are not transmitted over the internet.

The e-nose device is roughly 6 inches (15 cm) in diameter and is portable, though not designed to be worn. The researchers developed several versions of ⁠the odor generator, including wristband, necklace and handheld designs.

'EVERYDAY ODORS'

At this point, the e-nose recognizes ‌just the five scents.

"We chose these because they are familiar everyday odors with ‌different scent profiles, making them useful examples for demonstrating the system. We have not yet expanded beyond those categories," Yang said.

"A broader scent library ‌is possible in principle, but an unlimited repertoire is far beyond what we have demonstrated. Recognizing an odor and accurately reproducing ‌it are separate challenges. Covering a useful range of everyday scents is a more realistic goal, although that would still require substantial development," Yang said.

The receiving device cannot recreate every smell Scentronic encounters.

"To support additional odors, we would need to train the electronic nose to recognize them and provide corresponding scented liquids in the odor generator," Yang said.

The researchers see various potential applications for the technology.

"For example, someone could share the scent of ‌a meal with family or friends who live far away. Other potential applications include more immersive virtual and augmented reality experiences and online shopping that allows customers to sample selected scents remotely," ⁠Yang said.

'A RESEARCH PROTOTYPE'

The research ⁠was conducted and the devices developed without the involvement of a company, Yang said.

"At present, this is a research prototype. Moving toward commercialization would require a larger, more diverse training dataset and reliable odor recognition under real-world conditions, where smells often occur in mixtures," Yang said.

"The odor generator would also need further development to support more scents while remaining compact and convenient to use. Other considerations include scent fidelity, refillability, durability, manufacturing costs and the safety of repeated exposure to the scented mist," Yang said.

Smartphones are becoming increasingly capable. Could they in the future incorporate scent technology so that, for instance, a person at a tailgate party before an Ohio State football game could call a friend and share video, audio and the aroma of hot dogs on the grill?

"In principle, a smartphone could connect to a scent-generating accessory. Integrating everything into the phone itself would be more challenging because the scent reservoirs, electronics and atomizers all take up space and add weight. Miniaturization and convenient refilling would be important considerations," Yang said.

"The tailgate example illustrates the idea well. A future system could potentially combine video and audio with a corresponding scent, provided it could recognize the relevant odor and the receiver had a suitable scent formulation available. Our current system has not demonstrated the transmission of a grilling-hot-dog scent or the exact mixture of smells at a tailgate party," Yang said.


Websites Go Dark as AI Exposes Critical Security Flaws

Computer code is displayed on multiple screens in this illustration taken on October 22, 2026. (Reuters)
Computer code is displayed on multiple screens in this illustration taken on October 22, 2026. (Reuters)
TT

Websites Go Dark as AI Exposes Critical Security Flaws

Computer code is displayed on multiple screens in this illustration taken on October 22, 2026. (Reuters)
Computer code is displayed on multiple screens in this illustration taken on October 22, 2026. (Reuters)

Governments and companies around the world shut down websites Thursday as they raced to protect themselves from hacks after artificial intelligence uncovered critical flaws in a widely used programming language called PHP.

PHP helps run about 70 percent of the world's websites -- from online stores and news outlets to government services -- according to Wiz Research, one of the cybersecurity firms that found the two flaws.

Created in the early 1990s, PHP originally stood for "personal home page" but now means "hypertext preprocessor" and sits underneath popular web design platforms.

"These findings rank among the most severe vulnerabilities discovered in PHP, and arguably in software history," a Wiz blog post said.

Increasingly powerful AI models can spot weak points in back-end computer code that have gone unnoticed by humans for years.

That has heightened cybersecurity fears, with the number of software vulnerabilities discovered worldwide in 2026 on track to roughly double last year's record total.

- 'Quite devastating' -

PHP programmers released a fix Wednesday, and the US National Security Agency told organizations to patch their sites immediately or pull vulnerable systems offline -- a call echoed by authorities from China to the European Union.

Amazon Threat Intelligence said it had identified a hacking attempt carried out before the PHP security flaws were made public.

"It remains unclear how the actor acquired exploit information," it said, describing the incident as the "targeting of a honeypot" from an anonymized internet connection.

But Ryan Austin, who has worked on PHP issues for cybersecurity firm Calif, told the BBC: "At the moment, it doesn't look like exploitation has taken off or been widespread."

Only sites that run PHP on their own servers are exposed. Many large platforms are built on other programming languages or use operators that could install the fix quickly and were able to stay online.

Rahat Masood, senior lecturer in cybersecurity at the University of New South Wales, Sydney, described the discovery as "quite devastating".

It could allow "attackers to get into your servers without any authorization, without any username or password", she told AFP.

"Once they are in the servers, they can do anything they want" -- from stealing sensitive information to modifying website content -- she added, urging institutions to "take it seriously."

- 'New phase' -

Government agency sites in countries from Australia to Finland, the Netherlands and the United Kingdom were among those that went dark. Services from insurance firms, transport operators and media outlets were down for emergency maintenance.

Popular apps, including a Pokemon sleep tracker, were also temporarily taken offline while the fix was implemented, while the foundation that runs Wikipedia warned users they could see outages while it addressed the flaws.

"If you run PHP, it is imperative that you update now," the PHP Foundation, which funds developers working on the language, said in a blog post.

Volker Dusch, a security engineer at the foundation, told the Wall Street Journal it was the most serious problem PHP had faced in more than a decade, comparing it to Heartbleed, a 2014 flaw that set off a worldwide rush to patch.

Security firm Calif found the flaws in August using OpenAI's GPT-5.6 Sol model, as part of an OpenAI-funded audit of PHP's code.

OpenAI said the discovery "marks a new phase, where AI can find security bugs with internet-scale impact."

Wiz, which is owned by Google, said it found them independently weeks later with help from AI models including Google's Gemini 4 Argon and GPT-5.6 Sol.

The flaws had been reported privately to PHP's developers and kept confidential while a fix was prepared.

- AI fuels urgency -

Details leaked online Tuesday, a day before the planned release of the fix -- prompting the rush to take sites offline before hackers could exploit them.

Steve Kerrison, senior lecturer in cybersecurity at the Singapore campus of James Cook University, told AFP that the fear of hackers using AI to quickly and easily exploit the PHP vulnerabilities had fueled urgency to react.

Larger institutions, from government agencies to news outlets, should be able to fix their websites relatively fast, Kerrison said -- but others may be left vulnerable.

"There are sites, systems and people out there who will have no idea about this and still won't for days, weeks and months," Kerrison warned.

That may include user-run blogs that could be weaponized to spread computer viruses, spam people or distribute malicious content, he said.