New iPhone Exploit Uses Four Zero-Days

Kaspersky disclosed "Operation Triangulation," a multi-year zero-click iMessage campaign that chained four zero-day vulnerabilities (multiple CVEs) and an undocumented Apple hardware feature to bypass hardware memory protections (affecting devices with M1/M2), achieve kernel-level control, and load spyware on targeted iPhones, with sophisticated multi-stage JavaScript and Safari exploits and post-exploitation cleanup.