Citizen Lab company blog

NSO group iPhone zero-click, zero-day exploit captured in the wild

Citizen Lab found an actively exploited zero-click vulnerability being used to deliver NSO Group’s Pegasus mercenary spyware while checking the device of an individual employed by a Washington DC-based civil society organization with international offices. We refer to the exploit chain as BLASTPASS. The exploit chain…
Points
1,446
HN comments
832
Submissions
1
Cited by
13 commenters

Security & PrivacySociety, Policy & Culture2023

On Hacker News

SubmittedTitle on HNPointsComments
Sep 7, 2023NSO group iPhone zero-click, zero-day exploit captured in the wild by ericzawo1,446832

Cited in comments

Linked from 16 Hacker News comments by 13 different people, from Sep 2023 to Aug 2025.

Most recent:

Search every comment that links here →

More from Citizen Lab

All 26 posts →

Related posts from the same era