THE WILD

Summary from the TLDR InfoSec newsletter

Two zero-day vulnerabilities fixed by Apple in emergency security updates were exploited to deploy Pegasus commercial spyware onto fully patched iPhones through iMessage. The attackers were able to infect iPhones without victim interaction by sending PassKit attachments containing malicious images. Apple and Citizen Lab are encouraging device updates and the activation of Lockdown Mode for those at risk of targeted attacks.