Apple has issued an emergency software update after cyber security researchers said they had uncovered a new vulnerability allowing hackers to deploy Israeli company NSO Group’s spyware tool through iMessage.
The iPhone maker issued a patch on Monday to fix the flaw, which was discovered by researchers at the University of Toronto’s Citizen Lab after they analysed the iPhone of a Saudi activist that had been infected with spyware developed by NSO.
According to Citizen Lab, the vulnerability allowed hackers to access a target’s iPhone, Mac computer or Apple Watch via iMessage, without the user needing to click on a malicious link. The exploit, dubbed “FORCEDENTRY” by the researchers, is known as a “zero-click” attack.