Spyware reform critical as at least 180 journalists revealed as potential Pegasus targets