Big giant Apple updates a recently discovered vulnerability NSO, impacting all devices.

ByShehryar Makhdoom | Published date:
big-giant-apple-updates-recently-discovered-vulnerability-nso-impacting-all-devices

Forcibly breaking into all iPhones, iPods, Macs, and Apple Watches, Citizen Lab warns of the vulnerability. A newly found zero-day vulnerability has been revealed by Apple, which impacts all iPhones, iPods, Macs, and Apple Watches. Citizen Lab, the group that found the flaw and was given credit for it, advises consumers to upgrade their devices right away.

A prominent technology company, Apple, announced that iOS 14.8 for iPhones and iPads and new updates for Apple Watch and macOS would resolve at least one issue that it believes has already been exploited.

According to Citizen Lab,

Additional artifacts of the ForcedEntry vulnerability have been identified and exposed the information in August in an investigation into the exploitation of a zero-day vulnerability that was exploited to secretly hack into iPhones belonging to at least one Bahraini activist.
Apple's iMessage application, according to Citizen Lab, was the weak link used to exploit a zero-day vulnerability, which Citizen Lab termed because the target organizations would have zero days to repair the bug.

Pegasus lets users spy on a target's smartphone in a way that allows the user to access personal data, images, and messages as well as the target's position.

Because the bugs affected the latest iPhone software, both iOS 14.4 and later iOS 14.6, which Apple released in May, the vulnerability was substantial. It's not just that the flaws in the iOS 14 version called BlastDoor were broken through, either; the last iteration of Apple's mobile operating system, iOS 13, also had weaknesses in it that attackers were able to exploit. Because of its ability to bypass Apple's BlastDoor defenses, Citizen Lab has dubbed this hack ForcedEntry.

Citizen Lab has uncovered proof of the ForcedEntry vulnerability, which is used to infect devices, on the cellphone of a Saudi activist. The hack was discovered to be in effect when the machine was running the newest version of the software. According to the experts, the hack exploits a flaw in how Apple products show graphics on the screen.

Citizen Lab currently claims that the ForcedEntry vulnerability works on all Apple devices running the most recent version up until today.

News reported that John Scott-Railton, a researcher at Citizen Lab, believes that messaging apps, such as iMessage, constitute a significant target of nation-state hacking operations. The discovery of this latest vulnerability highlights the problems in safeguarding them.

Apple would not respond when contacted. Likewise, NSO Group refused to make a statement.

Comment