Following the NSO Group Pegasus spyware affair, researchers and Apple have discovered two critical vulnerabilities leading to zero click attacks.
The firm has corrected the flaws and urges users to update iOS quickly in the latest versions of a series of products – iOS and iPadOS 16.6.1, macOS 13.5.2 and watchOS 9.6.2.
In addition to Mac Ventura, the products affected include the iPhone 8 and later versions, all iPad Pro models, the 3rd-generation iPad Air and later versions, the 5th-generation iPad and later versions, the 5th-generation iPad mini and later versions, and the Apple Watch Series 4 and later versions.
The first zero-day has been corrected thanks to improved memory management, while the second has been fixed by the implementation of improved logic. Citizen Lab and Apple urge all users to update their devices quickly.
In 2021, the Pegasus spyware developed by the Israeli company NSO Group made headlines across the world for clients’ use, based on using critical vulnerabilities and zero click exploits on mobile devices, notably the iPhone, for spying purposes.
Since then, several vulnerabilities have been plugged. Apple and Citizen Lab, a collective deconstructing Pegasus, have discovered the two critical vulnerabilities.
Citizen Lab has dubbed this exploit chain “Blastpass” and it was used against an iPhone running iOS 16.6 and belonging to a Washington-based organization with international offices.
add your comment
Terms of publication : Not to offend the writer, people, sacred things, or attack religions or the divine self, and refrain from racist incitement and insults.