It should be no surprise that 2024 was among the deadliest for journalists in 30 years. Across the world, we’re seeing a sharp increase in attacks on media pluralism and independence, as governments of all stripes undermine the rule of law and democratic governance, erode protections for whistleblowers, and use dangerous narratives to smear journalists and human rights defenders. In many countries, governments are also passing laws that cite national security as a rationale for silencing speech they don’t like. This is happening in a context where civic space continues to shrink globally; after the U.S. administration decided to suspend funding for the U.S. Agency for International Development (USAID), dozens of independent media outlets in more than 30 countries were severely impacted.
These are far from the only threats. As we mark World Press Freedom Day 2025, we’re highlighting some of the gravest and most persistent digital threats to journalism: the largely unchecked rise of spyware, persistent attacks on encryption, increased disinformation and abuse on online platforms, and the weaponization of cybercrime laws to enable the silencing of journalists and human rights defenders. While these threats aren’t new, the current context puts people and communities already at risk in greater danger. Make no mistake: this is a crisis. Governments and all relevant stakeholders must take urgent and immediate action to save press freedom in the digital age.
Spyware threatens journalism and democracy worldwide
Spyware is one of the most insidious and pervasive threats to press freedom today. For journalists, privacy and the capacity to protect their sources are absolutely essential. Yet from Mexico to India, journalists working to uncover corruption and investigate human rights abuses continue to be unlawfully targeted using powerful surveillance tools like Pegasus, Predator, and Paragon’s Graphite, designed to extract, monitor, and intimidate. Recent cases only underscore the persistent global failure to rein in the shadowy spyware industry. In Italy, attackers targeted journalist Francesco Cancellato using Paragon spyware, while his colleague Ciro Pellegrino received an Apple notification about a mercenary spyware attack last week. In Serbia, investigative journalists from the Balkan Investigative Reporting Network (BIRN) discovered they were targeted using Pegasus; in addition, Serbian authorities have deployed the homegrown spyware NoviSpy and tools from the Israeli firm Cellebrite to spy on journalists and activists. And in Slovakia, there are reports alleging that the Slovak Information Service (SIS) has acquired Pegasus, moving from testing to full operation as of September 2024.
Spyware knows no borders. For journalists living in exile, many of whom have fled persecution in countries like Russia, digital surveillance is a form of transnational repression that extends the reach of abusive regimes. These attacks are not isolated incidents; they are part of a broader pattern that undermines democratic institutions and erodes the public’s right to know.
Encryption backdoors endanger journalists and human rights defenders
End-to-end encryption (E2EE) is what makes it possible for billions to communicate privately and securely despite ever-expanding surveillance. It is crucial for journalists to maintain the confidentiality of information and keep their sources safe, and for human rights defenders to protect themselves and their communities, especially in the context of repressive regimes that aggressively surveil and target critics and dissidents.
Despite the fact that E2EE safeguards free expression, protects sensitive data and financial transactions online, and strengthens cybersecurity and defense of critical infrastructure, governments around the world are ramping up efforts to weaken it, including the EU, UK, U.S., and India. Many are either contemplating or have already implemented measures to mandate “backdoor” access to encrypted systems, in order to scan communications, intercept information on secure platforms, or detect and block specific content. But as security experts have repeatedly pointed out, any such deliberate bypassing of E2EE only makes everyone less safe, opening up systems to further hacking and breaches, degrading security, and leaving journalists and human rights defenders even more vulnerable to attack. That’s not a world any of us wants to live in.
Failure to ensure safety on online platforms jeopardizes press freedom
Journalists, human rights defenders, and media in exile face frequent threats, intimidation, and cyberattacks on social media platforms. They are also often the target of online harassment and disinformation campaigns designed to discredit their work. With the rise of new technologies such as generative AI, more advanced means of surveillance, and other forms of malicious attack, digital threats are multiplying. Access Now’s Digital Security Helpline has provided direct technical assistance to journalists and human rights advocates for years, in the absence of adequate safeguards or avenues for redress for victims of these attacks. Both state and non-state actors use these tactics to gain access to confidential information and intimidate journalists. Journalists are more frequently victims of coordinated attacks, and it is imperative that both governments and platforms do more to protect them.
Weaponization of the law undermines the press
Imposing draconian “cybersecurity,” “national security,” or “anti-terrorism” laws without human rights safeguards is a common tactic that governments use to stop journalists and human rights defenders from engaging in public debate and holding authorities accountable. In Tunisia, for example, authorities use the cybercrimes decree law to restrict media diversity, foster self-censorship, and deter individuals from engaging in public debates. In the context of the 2024 elections, prosecutors invoked Article 24 of the law to target and silence journalists, lawyers, human rights defenders, and even political candidates. The provision combines vaguely defined offenses with disproportionate penalties of 5-10 years in prison for sharing, sending, or publishing false information, defamatory content, or other forms of expression, making it a powerful weapon for chilling speech.
Resources to learn more
As Access Now engages in World Press Freedom Day 2025 events and discussions this year, we’re sharing resources on digital threats to journalists, including reports that contain policy recommendations for safeguarding press freedom and protecting human rights defenders around the world.
- Digital Security Helpline — our helpline is a 24/7 resource for journalists and human rights defenders at risk, offering direct technical assistance for those in need. We can help you in nine languages and respond to all requests within two hours.
- Exiled, then spied on: Civil society in Latvia, Lithuania, and Poland targeted with Pegasus spyware — our analysis of how Russian, Belarusian, Latvian, and Israeli journalists and activists have been targeted with NSO Group’s Pegasus spyware within the EU, following the joint investigation into the use of NSO Group’s Pegasus spyware against Galina Timchenko, co-founder, CEO, and publisher of Meduza.
- Why encryption is important: 10 facts to counter encryption myths — our comprehensive guide debunking the most common myths about encryption.
- Platform accountability and human rights: a rule-of-law checklist — we lay out the rule-of-law safeguards that lawmakers should keep at the core of any platform accountability framework.
- A new blow to freedom of expression in Tunisia — our analysis of the cybercrimes decree law (Decree law No. 54 of 2022 on combating crimes related to information and communication systems in Tunisia).