https://pwn.watch/i/apple-blastpass-cve-2023-41064-41061 Citizen Lab caught BLASTPASS, a zero-click iMessage exploit chain that delivered NSO Group's Pegasus through malicious PassKit attachments carrying images. Apple fixed the ImageIO and Wallet bugs in emergency updates the same day. en Mon, 11 Sep 2023 00:00:00 GMT https://pwn.watch/i/apple-blastpass-cve-2023-41064-41061 https://pwn.watch/i/apple-blastpass-cve-2023-41064-41061#2023-09-11-ca11a922 Mon, 11 Sep 2023 00:00:00 GMT high <p>BLASTPASS: NSO zero-click iPhone exploit chain (CVE-2023-41064, CVE-2023-41061): CISA adds both CVEs to the KEV catalog</p> https://pwn.watch/i/apple-blastpass-cve-2023-41064-41061 https://pwn.watch/i/apple-blastpass-cve-2023-41064-41061#2023-09-07-7cd038c2 Thu, 07 Sep 2023 00:00:00 GMT high <p><a href="https://citizenlab.ca/2023/09/blastpass-nso-group-iphone-zero-click-zero-day-exploit-captured-in-the-wild/">Source</a></p>