apple security update closes flaw iphones

#Apple security update closes flaw iphones software#

“This spyware can do everything an iPhone user can do on their device and more,” said John Scott-Railton, a senior researcher at Citizen Lab, who teamed up with Bill Marczak, a senior research fellow at Citizen Lab, on the finding. Using the zero-click infection method, Pegasus can turn on a user’s camera and microphone, record messages, texts, emails, calls, even those sent via encrypted messaging and phone apps like Signal, and send them back to NSO’s clients at governments around the world.

Known as a “zero click remote exploit,” it is considered the holy grail of surveillance because it allows governments, mercenaries and criminals to secretly break into someone’s device without tipping the victim off. The spyware, called Pegasus, used a novel method to invisibly infect Apple devices without victims’ knowledge.

#Apple security update closes flaw iphones software#

Apple issued emergency software updates for a critical vulnerability in its products on Monday after security researchers uncovered a flaw that allows highly invasive spyware from Israel's NSO Group to infect anyone's iPhone, iPad, Apple Watch or Mac computer without so much as a click.Īpple’s security team had worked around the clock to develop a fix since Tuesday, after researchers at Citizen Lab, a cybersecurity watchdog organisation at the University of Toronto, discovered that a Saudi activist’s iPhone had been infected with an advanced form of spyware from NSO.