Cellebrite's zero-day exploit bypassed an Android lock screen to access a Serbian activist’s phone. Amnesty links attack to Linux kernel flaws.
https://www.cert.ssi.gouv.fr/avis/CERTFR-2025-AVI-0163/
https://www.cert.ssi.gouv.fr/avis/CERTFR-2025-AVI-0170/