APPLE users are being told to update their devices now to fix a bug that could have let government agencies install spyware.
A report suggests the security flaw could allow the “zero-click” install of the infamous Pegasus spyware.
Update your iPhone to iOS 14.8 now[/caption]
According to researchers at Citizen Lab, it’s very likely the bug led to spyware being installed on the phones of journalists, lawyers, and activists.
Apple users are advised to update to iOS 14.8, macOS Big Sur 11.6, and watchOS 7.6.2 as soon as they can.
The warning comes ahead of an Apple event this evening where the tech giant is widely speculated to be launching iOS 15.
Citizen Lab explained: “While analyzing the phone of a Saudi activist infected with NSO Group’s Pegasus spyware, we discovered a zero-day zero-click exploit against iMessage.
“The exploit, which we call FORCEDENTRY, targets Apple’s image rendering library, and was effective against Apple iOS, MacOS and WatchOS devices.”
Most read in Phones & Gadgets
Apple's big iPhone event is TODAY – here's how and when to watch live
iPhone 13 'coming TODAY' – as we reveal the handset's secret release date
TASTE THE RAINBOW
New iPhone 13 colours 'LEAKED' just one day before today's Apple event
SEA THE FUTURE
Navy reveals 'fleet of FUTURE' with self-driving submarines and 'gun drones'
iPhone is getting HUGE change that will make upgrading very tempting
You should DELETE Google Photos from your phone now, cyber-expert warns
The security experts informed Apple about the findings and the tech giant released a patch on September 13.
What is Pegasus spyware?
Pegasus is military-grade software that can be secretly uploaded onto a smartphone or device.
It’s been round since 2016 but a recent leak has brought it back into the news.
It was designed by Israeli company NSO Group, also called as Q Cyber Technologies.
The spyware can film you through your phone camera, listen to calls and even send messages from your phone.
It’s known to have targeted both Apple and Android devices.
Pegasus used to be installed on smartphones by encouraging victims to click on a link that may have been emailed or texted to them.
A new version of the spyware can load on a phone without the user needing to click anything, which is known as a “zero-click” attack.
It can avoid detection by antivirus software.
- Read all the latest Phones & Gadgets news
- Keep up-to-date on Apple stories
- Get the latest on Facebook, WhatsApp and Instagram
Best Phone and Gadget tips and hacks
Looking for tips and hacks for your phone? Want to find those secret features within social media apps? We have you covered…
- How to get your deleted Instagram photos back
- How to track someone on Google Maps
- How can I increase my Snapchat score?
- How can I change my Facebook password?
- How can I do a duet on TikTok?
- Here’s how to see if your Gmail has been hacked
- How can I change my Amazon Alexa voice in seconds?
- What is dating app Bumble?
- How can I test my broadband internet speed?
- Here’s how to find your Sky TV remote in SECONDS
In other news, check out the new Lamborghini Huracan Evo that can clean your house and cook you dinner.
Check out the wildly impressive Panasonic 65HZ1000 TV, which makes most tellies look rubbish.
Read our complete guide to Call of Duty 2021.
And Dell’s Alienware R10 Ryzen Edition is a gaming PC powerhouse that crushes both the new consoles.
We pay for your stories! Do you have a story for The Sun Online Tech & Science team? Email us at [email protected]