Push Admin

Apple issues fix for flaw linked to Pegasus spyware

Article (news)

Glenn Chapman, Agence France-Presse

<div class="embed-wrap"><figure data-feedback="fb:likes,fb:comments"><img alt="The Apple Inc. logo is seen hanging at the entrance to the Apple store on 5th Avenue in Manhattan, New York, October 16, 2019. Mike Segar, Reuters/file" src="https://sa.kapamilya.com/absnews/abscbnnews/media/2021/reuters/09/14/20210903-apple-workers.jpg"/><figcaption>The Apple Inc. logo is seen hanging at the entrance to the Apple store on 5th Avenue in Manhattan, New York, October 16, 2019. Mike Segar, Reuters/file</figcaption></figure></div>Apple released a fix Monday for a weakness that can let the spyware at the heart of the Pegasus scandal infect devices without users even clicking on a malicious message or link.The Pegasus software from Israeli firm NSO Group has been under intense scrutiny since an international media investigation claimed it was used to spy on the phones of human rights activists, journalists and even heads of state.Researchers at Citizen Lab, a cybersecurity watchdog organization in Canada, found the problem while analyzing a Saudi activist&#x27;s phone that had been compromised with the code.&quot;We determined that the mercenary spyware company NSO Group used the vulnerability to remotely exploit and infect the latest Apple devices with the Pegasus spyware,&quot; Citizen Lab wrote in a post.In March Citizen Lab examined the activist&#x27;s phone and determined it was hacked with Pegasus spyware introduced via iMessage texting and that it didn&#x27;t even require the phone&#x27;s user to so much as click.Hours after releasing the fix, Apple said it had &quot;rapidly&quot; developed the update following Citizen Lab&#x27;s discovery of the problem.&quot;Attacks like the ones described are highly sophisticated, cost millions of dollars to develop, often have a short shelf life, and are used to target specific individuals,&quot; the company said.NSO did not dispute Pegasus had prompted the urgent software upgrade, and said in a statement that it would &quot;continue to provide intelligence and law enforcement agencies around the world with life saving technologies to fight terror and crime.&quot;<div>- No click needed -</div>Pegasus has evolved to become more effective since it was uncovered by Citizen Lab and cyber security firm Lookout five years ago.Pegasus can be deployed as a &quot;zero-click exploit,&quot; meaning that the spyware can install itself without the victim even clicking a booby-trapped link or file, according to Lookout senior manager Hank Schless.&quot;Many apps will automatically create a preview or cache of links in order to improve the user experience,&quot; Schless said.&quot;Pegasus takes advantage of this functionality to silently infect the device.&quot;UN experts recently called for an international moratorium on the sale of surveillance technology until regulations are implemented to protect human rights following an Israeli spyware scandal.An international media investigation reported in July that several governments used the Pegasus malware, created by NSO Group, to spy on activists, journalists and politicians. Pegasus can switch on a phone&#x27;s camera or microphone and harvest its data.&quot;It is highly dangerous and irresponsible to allow the surveillance technology and trade sector to operate as a human rights-free zone,&quot; the United Nations human rights experts said in a statement at the time.The statement was signed by three special rapporteurs on rights and a working group on the issue of human rights and transnational corporations and other businesses.Israel&#x27;s defense establishment has set up a committee to review NSO&#x27;s business, including the process through which export licences are granted.NSO insists its software is intended for use only in fighting terrorism and other crimes, and says it exports to 45 countries.

The fix is for a weakness that can let the spyware at the heart of the Pegasus scandal infect devices without users even clicking on a malicious link.

Apple issues fix for flaw linked to Pegasus spyware

News

Entertainment

Lifestyle

Sports

Metro.Style

More

Traffic

Manila

Horoscope

Business

Apple issues fix for flaw linked to Pegasus spyware

Glenn Chapman,

Agence France-Presse

Published Sep 14, 2021 07:43 AM PHT

|

Updated Sep 14, 2021 08:25 AM PHT

Read More:

ANC

Apple

Pegasus spyware

malware

ABS-CBN is the leading media and entertainment company in the Philippines, offering quality content across TV, radio, digital, and film. Committed to public service and promoting Filipino values, ABS-CBN continues to inspire and connect audiences worldwide.

Corporate

Investors

Governance

International Distribution

Corporate

Governance

Investors

International Distribution

NPC Seal of Registration

Privacy Policy

AI Policy

Terms of Service

Advertise with Us

© 2025 ABS-CBN Corporation. All Rights Reserved.

NPC Seal of Registration

Privacy Policy

Terms of Service

AI Policy

Advertise with Us

© 2025 ABS-CBN Corporation. All Rights Reserved.

NPC Seal of Registration

Privacy Policy

Terms of Service

AI Policy

Advertise with Us

© 2025 ABS-CBN Corporation. All Rights Reserved.