Apple investigating report of a new iOS exploit being used in the wild

ZDNet:

Cyber-security firm ZecOps said today it discovered what appears to be exploitation attempts using a new iOS vulnerability.

Apple is currently investigating the matter, and the company is preparing a security update to be made available soon.

In a report published today, ZecOps said it found evidence that hackers have been using an iOS bug since at least January 2018. Researchers say the new iOS exploit appears to have been leveraged as part of malformed emails sent to high-profile iOS users.

ZecOps researchers say the attack is a zero-click exploit that doesn’t require users to interact with the email, with the exploit triggering once the user receives the email or the user opens the Apple Mail app. The exploit doesn’t trigger in Gmail or other email clients, researchers said.

This is a particularly nasty exploit.