A new report reveals that despite Cellebrite cutting ties with Russia, the company's phone hacking tools were still used by Russian authorities to access the device of Andrey Pivovarov, an opposition politician. This highlights the challenge tech companies face in preventing their products from falling into the wrong hands.

The incident raises serious concerns about how Western firms handle sensitive technologies sold to governments. Cellebrite’s claim that it could disable its devices or stop them from receiving updates was rendered meaningless once they were deployed in Russia, underscoring a critical flaw in their security measures.

Experts suggest that Cellebrite should implement more robust measures such as remote disabling of tools and watermarking to prevent misuse. However, the company’s refusal to confirm if it asks its customers to dismantle legacy devices adds another layer of uncertainty.

This case is not an isolated incident; similar issues have been documented in regions like Hong Kong and Kenya where Cellebrite's technology has been used against activists and journalists. The episode serves as a stark reminder that the consequences of selling powerful tools to governments can be dire, even when companies attempt to withdraw their support.

The broader implications are profound: if major tech firms cannot effectively control how their products are used by government clients, what does this say about the future of surveillance technology?