Pegasus Spyware Resurfaces with Newly Revealed Zero-Click Vulnerability

The report describes The Citizen Lab's disclosure of a zero-click iMessage image-rendering vulnerability used by the Pegasus spyware (ForcedEntry) to remotely infect Apple devices; Apple issued security updates (iOS 14.8, iPadOS 14.8, macOS updates) to mitigate CVE-2021-30860, and Zimperium asserts its on-device machine-learning protections detected and blocked the exploit for customers prior to public disclosure.