 |
| Citizen Lab also said the security issue was exploited to plant spyware on a Saudi activist's iPhone, adding that it had high confidence that the Israeli hacker-for-hire firm, NSO Group, was behind that attack. (Photo by= Getty Images) |
[Asia News = Reporter Reakkana] Apple has issued a software patch to block so-called "zero-click" spyware that could infect iPhones and iPads. BBC reported that independent researchers identified the flaw, which lets hackers access devices through the iMessage service even if users don’t click on a link or file.
The researchers added that the problem affects all of the technology giant's operating systems. Apple said it issued the security update in response to a "maliciously crafted" PDF file. University of Toronto's Citizen Lab, which first highlighted the issue, had previously found evidence of zero-click spyware, but "this is the first one where the exploit has been captured so we can find out how it works," said researcher Bill Marczak. The researchers said that the previously unknown vulnerability affected all major Apple devices, like iPhones, Macs and Apple Watches.
Security experts have said that although the discovery is significant, most users of Apple devices should not be overly concerned as such attacks are usually highly targeted. Apple said in a blog post that it had issued the iOS 14.8 and iPadOS 14.8 software patches after it became aware of a report that the flaw "may have been actively exploited". The announcement came while the technology giant prepared to unveil new devices at its annual launch event on Tuesday. The company is expected to reveal new iPhones and updates to its AirPods and Apple Watch.
