Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://eupolicy.social/users/ilumium/statuses/111028945378775410">Jan Penfrat (ilumium@eupolicy.social)'s status on Friday, 08-Sep-2023 19:09:24 JST</a><a href="https://eupolicy.social/@ilumium" title="ilumium@eupolicy.social"><img src="https://gnusocial.jp/avatar/7052-48-20220824082452.webp" width="48" height="48" alt="Jan Penfrat" style="position: absolute; left: 0; top: 0;">Jan Penfrat</a><div><ul><li></ul></div></section><article><p>🚨🚨WE URGE EVERYONE TO UPDATE THEIR APPLE DEVICES AS SOON AS POSSIBLE. </p><p>We have found an actively exploited <a href="https://eupolicy.social/tags/zero" rel="tag">#zero</a> <a href="https://eupolicy.social/tags/click" rel="tag">#click</a> vulnerability that was used to deliver <a href="https://eupolicy.social/tags/NSO" rel="tag">#NSO</a> group’s <a href="https://eupolicy.social/tags/Pegasus" rel="tag">#Pegasus</a> <a href="https://eupolicy.social/tags/spyware" rel="tag">#spyware</a>.</p><p>From <a href="https://mastodon.social/@citizenlab">@citizenlab</a> </p><p><a href="https://citizenlab.ca/2023/09/blastpass-nso-group-iphone-zero-click-zero-day-exploit-captured-in-the-wild/" rel="nofollow noreferrer">https://citizenlab.ca/2023/09/blastpass-nso-group-iphone-zero-click-zero-day-exploit-captured-in-the-wild/</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/2037618#notice-3998826">In conversation</a><time datetime="2023-09-08T19:09:24+09:00" title="Friday, 08-Sep-2023 19:09:24 JST">about a year ago</time> <span>from <span><a href="https://eupolicy.social/@ilumium/111028945378775410" rel="external" title="Sent from eupolicy.social via ActivityPub">eupolicy.social</a></span></span><a href="https://eupolicy.social/@ilumium/111028945378775410">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: citizenlab.ca</div><h5><a href="https://citizenlab.ca/2023/09/blastpass-nso-group-iphone-zero-click-zero-day-exploit-captured-in-the-wild/">BLASTPASS: NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in the Wild - The Citizen Lab</a></h5><div> from <span>@jsrailton</span></div></header><div>Citizen Lab found an actively exploited zero-click vulnerability being used to deliver NSO Group’s Pegasus mercenary spyware while checking the device of an individual employed by a Washington DC-based civil society organization with international offices. We refer to the exploit chain as BLASTPASS. The exploit chain was capable of compromising iPhones running the latest version of iOS (16.6) without any interaction from the victim.</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Jan Penfrat (ilumium@eupolicy.social)'s status on Friday, 08-Sep-2023 19:09:24 JSTJan Penfrat
- The Citizen Lab
🚨🚨WE URGE EVERYONE TO UPDATE THEIR APPLE DEVICES AS SOON AS POSSIBLE.
We have found an actively exploited #zero #click vulnerability that was used to deliver #NSO group’s #Pegasus #spyware.
From @citizenlab
https://citizenlab.ca/2023/09/blastpass-nso-group-iphone-zero-click-zero-day-exploit-captured-in-the-wild/
In conversationabout a year ago from eupolicy.socialpermalink
Attachments
1. Domain not in remote thumbnail source whitelist: citizenlab.ca
  BLASTPASS: NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in the Wild - The Citizen Lab
  from @jsrailton
  Citizen Lab found an actively exploited zero-click vulnerability being used to deliver NSO Group’s Pegasus mercenary spyware while checking the device of an individual employed by a Washington DC-based civil society organization with international offices. We refer to the exploit chain as BLASTPASS. The exploit chain was capable of compromising iPhones running the latest version of iOS (16.6) without any interaction from the victim.

Public

Embed Notice

HTML Code

Corresponding Notice