BLASTPASS: Government agencies told to secure iPhones against spyware attacks

What’s happened? CISA, the United States’s Cybersecurity and Infrastructure Security Agency, has ordered federal agencies to patch their iPhones against vulnerabilities that can be used as part of a zero-click attack to install spyware from the notorious NSO Group. A “zero-click attack”? That’s an attack that doesn’t require any interaction from the user. Often times a malicious hacker requires a user to open an attached file, or visit a dangerous web link, in order to activate an attack. With a zero-click attack, the user doesn’t have to do anything. So how does it work? In this particular…