Citizen Lab confirmed Pegasus on a Serbian university rector's iPhone and flagged likely spyware targeting of a prosecutor ahead of elections.