{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "BLASTPASS: NSO zero-click iPhone exploit chain (CVE-2023-41064, CVE-2023-41061) · updates",
  "home_page_url": "https://pwn.watch/i/apple-blastpass-cve-2023-41064-41061",
  "feed_url": "https://pwn.watch/i/apple-blastpass-cve-2023-41064-41061/feed.json",
  "description": "Citizen Lab caught BLASTPASS, a zero-click iMessage exploit chain that delivered NSO Group's Pegasus through malicious PassKit attachments carrying images. Apple fixed the ImageIO and Wallet bugs in emergency updates the same day.",
  "language": "en",
  "_pwn": {
    "slug": "apple-blastpass-cve-2023-41064-41061",
    "severity": "high",
    "status": "closed",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/apple-blastpass-cve-2023-41064-41061/feed.xml",
    "llms": "https://pwn.watch/i/apple-blastpass-cve-2023-41064-41061/llms.txt",
    "json": "https://pwn.watch/i/apple-blastpass-cve-2023-41064-41061.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/apple-blastpass-cve-2023-41064-41061#2023-09-11-ca11a922",
      "url": "https://pwn.watch/i/apple-blastpass-cve-2023-41064-41061#2023-09-11-ca11a922",
      "title": "BLASTPASS: NSO zero-click iPhone exploit chain (CVE-2023-41064, CVE-2023-41061): CISA adds both CVEs to the KEV catalog",
      "content_text": "BLASTPASS: NSO zero-click iPhone exploit chain (CVE-2023-41064, CVE-2023-41061): CISA adds both CVEs to the KEV catalog",
      "date_published": "2023-09-11T00:00:00.000Z",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/apple-blastpass-cve-2023-41064-41061#2023-09-07-7cd038c2",
      "url": "https://pwn.watch/i/apple-blastpass-cve-2023-41064-41061#2023-09-07-7cd038c2",
      "title": "BLASTPASS: NSO zero-click iPhone exploit chain (CVE-2023-41064, CVE-2023-41061): Citizen Lab discloses BLASTPASS; Apple ships iOS 16.6.1 and related updates",
      "content_text": "BLASTPASS: NSO zero-click iPhone exploit chain (CVE-2023-41064, CVE-2023-41061): Citizen Lab discloses BLASTPASS; Apple ships iOS 16.6.1 and related updates\n\nSource: https://citizenlab.ca/2023/09/blastpass-nso-group-iphone-zero-click-zero-day-exploit-captured-in-the-wild/",
      "date_published": "2023-09-07T00:00:00.000Z",
      "external_url": "https://citizenlab.ca/2023/09/blastpass-nso-group-iphone-zero-click-zero-day-exploit-captured-in-the-wild/",
      "tags": [
        "high"
      ]
    }
  ]
}