New Zero-Click Exploits Against iOS

CitizenLab has identified three zero-click exploits against iOS 15 and 16. These were used by NSO Group’s Pegasus spyware in 2022, and deployed by Mexico against human rights defenders. These vulnerabilities have all been patched.

One interesting bit is that Apple’s Lockdown Mode (part of iOS 16) seems to have worked to prevent infection.

News article.

apple article citizenlab click defenders exploits human human rights infection ios ios 15 ios 16 lockdown lockdown mode mexico mode nso nso group pegasus pegasus spyware rights spyware vulnerabilities zero-click