Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

← Live incidents

Jun 1, 2023

1 new incident, 0 with updates.

Started

  • ClosedPatched

    Operation Triangulation: zero-click iMessage spyware on Kaspersky's iPhones

    Kaspersky found a years-long zero-click iMessage campaign on its own staff's iPhones. The chain used several Apple zero-days, including a bypass of hardware memory protections through undocumented MMIO registers (CVE-2023-38606), which was revealed at 37C3 in December 2023.

    Apple iOS (and other Apple OSes sharing the bugs)Closed Dec 27, 2023