Apple zero-click iMessage exploit used to infect iPhones with spyware

Citizen Lab says two zero-days fixed by Apple today in emergency security updates were actively abused as part of a zero-click exploit chain to deploy NSO Group's Pegasus commercial spyware onto fully patched iPhones. [...]

apple citizen lab click commercial commercial spyware deploy emergency exploit imessage infect iphones lab nso nso group pegasus security security updates spyware today updates zero-click zero-click exploit zero-days