Apple closes zero-day security gap10. September 2023
Apple closes zero-day security gap
San Francisco, September 9th 2023
Apple has released an emergency software update for iPhones and iPads to fix a zero-day security flaw that could allow hackers to take over the devices’ functions. Apple released iOS 16.6.1 in response to the security flaw discovered by spyware research group Citizen Lab.
• Citizen Lab discovered the previously unknown vulnerability when it installed Pegasus spyware on the Apple device of an unnamed Washington, D.C. employee. local civil society organization.
• Pegasus allowed users to send iMessage attachments containing hidden code to victims, allowing the spyware to take over the device’s functions “without any interaction from the victim.”
• Citizen Lab advises all Apple users to update their devices and recommends Apple’s “lockdown mode” for those at higher risk of cyberattacks.
• Pegasus spyware, developed by Israel’s NSO Group, is used by foreign governments to spy on activists, dissidents and journalists.
• In 2021, the US government blacklisted NSO for spyware and alleged surveillance.
• The update also fixes an issue with Apple Wallet where users save card information.