Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

ClosedHighPatched

Day · Jun 1, 2023

Operation Triangulation: zero-click iMessage spyware on Kaspersky's iPhones

Apple iOS (and other Apple OSes sharing the bugs)

Follow this incident

Updates on Jun 1, 2023

  1. Kaspersky discloses Operation Triangulation

    Source

Summary

Kaspersky found a years-long zero-click iMessage campaign on its own staff's iPhones. The chain used several Apple zero-days, including a bypass of hardware memory protections through undocumented MMIO registers (CVE-2023-38606), which was revealed at 37C3 in December 2023.

Read the full incident →

Advisories4