A New Yorker investigation reveals Spain likely used Pegasus to target Catalanian leaders, suggests UAE hacked a U.K. government network and says Israeli spyware giant NSO ‘lied’ about not having access to client data