Spyware
Security incidents tagged Spyware. Newest first.
0 Spyware incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 2
- Live
- 0
- Patched
- 2
- Days without an incident
- 1137
- Longest quiet run: 1030 days (Dec 28–Oct 22)
Show 2 older incidents2 older incidents
September 2023 1
HighBLASTPASS: NSO zero-click iPhone exploit chain (CVE-2023-41064, CVE-2023-41061)Patched
Apple iOS, iPadOS, macOS and watchOS Patched
Citizen Lab caught BLASTPASS, a zero-click iMessage exploit chain that delivered NSO Group's Pegasus through malicious PassKit attachments carrying images. Apple fixed the ImageIO and Wallet bugs in emergency updates the same day.
Open incident →CVE-2023-41064 · CVE-2023-41061
June 2023 1
HighOperation Triangulation: zero-click iMessage spyware on Kaspersky's iPhonesPatched
Apple iOS (and other Apple OSes sharing the bugs) Patched
Kaspersky found a years-long zero-click iMessage campaign on its own staff's iPhones. The chain used several Apple zero-days, including a bypass of hardware memory protections through undocumented MMIO registers (CVE-2023-38606), which was revealed at 37C3 in December 2023.
Open incident →CVE-2023-32434 · CVE-2023-32435 · CVE-2023-38606
