Public
- Public
- Groups
- Popular
- People

Conversation

Notices

evacide (evacide@hachyderm.io)'s status on Thursday, 07-Sep-2023 21:04:55 UTC evacide

Everybody go update your iPhones.
The new 0-click vuln exploited by NSO Group is sent via a malicious image in iMessage.
https://citizenlab.ca/2023/09/blastpass-nso-group-iphone-zero-click-zero-day-exploit-captured-in-the-wild/
In conversation about a year ago from hachyderm.io permalink
Attachments
1. BLASTPASS: NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in the Wild - The Citizen Lab
  
  from @jsrailton
  
  Citizen Lab found an actively exploited zero-click vulnerability being used to deliver NSO Group’s Pegasus mercenary spyware while checking the device of an individual employed by a Washington DC-based civil society organization with international offices. We refer to the exploit chain as BLASTPASS. The exploit chain was capable of compromising iPhones running the latest version of iOS (16.6) without any interaction from the victim.

Feeds