

"They are ubiquitous, which makes them really attractive, so they are an increasingly common target for attackers.

John Scott-Railton, senior researcher at Citizen Lab, said: "What this highlights is that chat apps are the soft underbelly of device security.
#APPLE SECURITY UPDATE SPYWARE FLAW IWATCHES SOFTWARE#
The tech giant has issued the update on the iPhone, iPad, Mac and Apple Watch through iOS 14.8, iPadOS 14.8, macOS 11.6 and watchOS 7.6.2 software updates.Ĭitizen Lab researchers said they had found evidence of zero-click spyware earlier too but the latest was the first time where they could capture the exploit to find out how it works. The issue could affect all of Apple's devices, including iPhones, Macs and Apple Watches.Īpple's iMessage is considered to be one of the most secure messaging apps. NEW YORK (AP) Apple regularly issues updates to the software powering the iPhone, and sometimes it’s OK to dawdle when it comes to installing them. WHY IS UPDATING YOUR APPLE DEVICE SO URGENT Commercial spyware companies such as Israel’s NSO Group are known for identifying and taking advantage of such flaws, exploiting them in malware that surreptitiously infects targets’ smartphones, siphons their contents and surveils the targets in real time. The flaw allows hackers to access Apple devices through the iMessage service even if users do not click on a link or file, known as a zero-click exploit.

With the flaw, a hacker using NSO's Pegasus malware gained access to Saudi activist's iPhone. According to the security researchers, Israel-based NSO Group used the flaw to exploit and infect the latest devices with spyware.
