BLASTPASS: NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in the Wild - The Citizen Lab
citizenlab.ca
Citizen Lab found an actively exploited zero-click vulnerability being used to deliver NSO Group’s Pegasus mercenary spyware while checking the device of an individual employed by a Washington DC-based civil society organization with international offices. We refer to the exploit chain as BLASTPASS. The exploit chain was capable of compromising iPhones running the latest version of iOS (16.6) without any interaction from the victim.

We refer to the exploit chain as BLASTPASS. The exploit chain was capable of compromising iPhones running the latest version of iOS (16.6) without any interaction from the victim.

  • some_guy@lemmy.sdf.orgEnglish
    6·
    10 months ago

    The fine folks at CitizenLab are doing such important work. I just want to call out what a net-benefit they are for us all. I can’t count how many times I see or hear their name in sec updates, sec podcasts, news stories, etc. Thank you to CitizenLab!

    • PlexSheep@feddit.deEnglish
      2·
      10 months ago

      I hear only good stuff from them. I think they were featured in the last episode of darkness diaries too.

    • Mwalimu@baraza.africaOPEnglish
      1·
      10 months ago

      Yes. The linked article points to Apple’s release notes.

      CVE-2023-41064: The Citizen Lab at The University of Torontoʼs Munk School