# Personal cybersecurity and data protection practices

> Live situation record from CLSTR: https://clstr.news/situations/personal-cybersecurity-and-data-protection-practices
> Updated: 2026-10-19T10:15:50.000Z. Sources: 14. Developments: 2.

Guidance for individual digital security focuses on maintaining robust habits to mitigate risks from data breaches and identity theft. Key recommendations include regular software updates for operating systems and applications to close vulnerabilities, and the use of Microsoft Defender as a foundational antivirus tool for Windows users.

Password management is a central theme, emphasizing the creation of complex, unique credentials for every account using a mix of letters, numbers, and symbols. The use of password managers is suggested to maintain these credentials. 

To prevent identity theft and phishing, users are advised to limit the amount of personal information shared on social media, such as birth dates or locations, and to regularly review privacy settings. Additionally, caution is recommended when conducting sensitive transactions over public Wi-Fi networks.

Recent developments highlight the sophisticated nature of modern threats, specifically the use of mercenary spyware. In Serbia, research from Citizen Lab and the SHARE Foundation confirmed that Vladan Đokić, Rector of the University of Belgrade, was targeted with Pegasus spyware via a ‘zero-click’ exploit, which requires no user interaction to compromise a device. 

Furthermore, Rade Bajić, a senior prosecutorial associate at the Public Prosecutor’s Office for Organized Crime, received high-confidence threat notifications from Apple indicating he was also targeted. These incidents occurred amid political tension in Serbia, with investigators noting that targeting judicial and academic figures threatens institutional independence and academic autonomy.

## Claims

- Vladan Đokić's iPhone was infected with Pegasus spyware in 2026. (corroborated by 10 sources)
- The Pegasus spyware was developed by the Israeli company NSO Group. (corroborated by 9 sources)
- Rade Bajić received Apple threat notifications regarding mercenary spyware. (corroborated by 8 sources)
- The Pegasus infection used a zero-click exploit. (corroborated by 5 sources)
- Rade Bajić investigated corruption related to the Generalštab building project. (corroborated by 4 sources)
- Vladan Đokić is a prominent figure in the Serbian pro-democracy movement. (corroborated by 4 sources)
- At least 14 people in Serbia were targeted by advanced spyware earlier in 2026. (corroborated by 3 sources)
- The Serbian Interior Ministry has previously dismissed allegations of cyberespionage. (corroborated by 2 sources)

## Timeline

### 2026-10-19: University of Belgrade Rector targeted by Pegasus spyware

Citizen Lab and the SHARE Foundation confirmed that University of Belgrade Rector Vladan Đokić and prosecutor Rade Bajić were targeted by Pegasus spyware in Serbia.

12 sources. https://clstr.news/cluster/cybersecurity-best-practices-for-protecting-personal-data-online

### 2026-10-07: Cybersecurity best practices for Windows and password management

Essential Windows security involves regular software updates, Microsoft Defender, and strong authentication. Common advice like using commas in passwords to disrupt CSV leaks is largely ineffective.

2 sources. https://clstr.news/cluster/cybersecurity-best-practices-for-windows-and-password-management

---
Cite as: Personal cybersecurity and data protection practices. CLSTR, https://clstr.news/situations/personal-cybersecurity-and-data-protection-practices