[ad_1]
Apple It released new security updates on Monday following the discovery of a new hack that didn’t require people to click on anything to become a victim.
Toronto-based research group Citizen Lab said it has found a security vulnerability it calls FORCEDENTRY and weaponizes against iMessage. Appletargeted messaging app Apple‘s image processing library.
The lab said it discovered the hack on a Saudi activist’s phone, which the group says was infected by Israeli technology and spyware firm NSO Group.
“Our latest discovery is another Apple The zero-day employed as part of the NSO Group’s arsenal further demonstrates that companies like the NSO Group are facilitating ‘despotism as a service’ for unaccountable government security agencies,” Citizen Lab researchers wrote in their report describing the vulnerability. “This growing, highly profitable and harmful market is desperately needed to be regulated.”
NSO Group did not address Citizen Lab’s accusations in its response to the investigators’ report, and Apple‘ update.
“NSO Group will continue to provide life-saving technologies to intelligence and law enforcement agencies around the world to combat terrorism and crime,” the spyware firm said in a statement.
AppleThe webpage detailing the security updates released Monday does not offer comprehensive details on why the update is necessary.
“For the protection of customers, Apple does not disclose, discuss, or confirm security issues until an investigation takes place and patches or releases are available.” Apple‘s website.
The corresponding security update for iPhones and iPads is listed as iOS 14.8 and iPadOS 14.8. Other updates Apple devices are listed Apple‘s website.
Citizen Lab researchers noted that popular messaging apps like iMessage are an “irresistible soft target” that will continue to be the focus of hackers unless intensive engineering is done to the issue.
“The ubiquitous chat apps have become a major target for the most sophisticated threat actors, including nation-state espionage operations and the paid spyware companies that service them,” Citizen Lab researchers wrote.
[ad_2]
Source link