ClosedPatched
Day · Dec 27, 2023
Operation Triangulation: zero-click iMessage spyware on Kaspersky's iPhones
Apple iOS (and other Apple OSes sharing the bugs)
Updates on Dec 27, 2023
At 37C3, Kaspersky details the hardware-feature bypass behind CVE-2023-38606
Source
Summary
Kaspersky found a years-long zero-click iMessage campaign on its own staff's iPhones. The chain used several Apple zero-days, including a bypass of hardware memory protections through undocumented MMIO registers (CVE-2023-38606), which was revealed at 37C3 in December 2023.
Read the full incident →
