"Discovered by our security team where I work"

Any published where?

Internal audit in the company for customers ( security Company).

A couple of years later, our US customer had the same conclusion. Probably that one was published ( US government)

Anecdotes are not data.

Really - they aren't.

We literally have a hardware device that removes any "spyware" from communicating externally because of it.

People in the security industry ( cameras) may know it.