Toronto lab uncovers flaw in Apple devices that prompts worldwide update for users
The latest iOS update is an urgent and important one for every Apple user worldwide whether they have a phone, computer or watch.
The tech giant has issued a security patch after Citizen Lab, based at the University of Toronto, uncovered a concerning flaw.
“That feels pretty good. That said, it’s also sobering because it highlights the sophistication of the problem we’re looking at,” John Scott-Railton, senior researcher at the lab, told CTV News Toronto Tuesday.
He said the team discovered a technique allowing spyware to access devices through what’s called the zero-click exploit, which allows someone to remotely hack and infect a device without the owner ever clicking on a link or ever knowing.
Researchers believe the spyware was developed by NSO Group, an Israeli technology firm, with products for governments to prevent crime and terror. Citizen Lab said they picked up on it while a Saudi activist was being targeted.
Researchers also say Apple had no idea about the flaw which means the company had to act right away.
“Today, the targets appear to be people like activists and other high value people. That said, there is nothing to prevent this company from doing what they want to do tomorrow, which is sell it to local governments and local police. That’s a pretty scary thought because we know there are problems with oversight,” Scott-Railton said.
Citizen Lab has been analyzing these types of digital threats from Toronto for years and has local students help with some of its projects.
“Make sure to update your phones but also remember what this update means. This means there is an industry out there that is unaccountable and finding ways to hack any phone in the world without any action on your part,” Scott-Railton said.
He warns while this flaw was caught, those behind the zero-click exploit are increasingly making the technology more sophisticated and dangerous.
CTVNews.ca Top Stories
Trudeau acknowledges charges in Nijjar killing, calls for commitment to democracy
Prime Minister Justin Trudeau has acknowledged the charges laid Friday in relation to the murder of B.C. Sikh activist Hardeep Singh Nijjar.
No proof man lied to brother about number of kittens born in litter, B.C. tribunal rules
A man was denied a $5,000 payout from his brother after a B.C. tribunal dismissed his claim disputing how many kittens were born in a litter.
Bodies recovered in Mexico likely 2 Australians, 1 American who went missing: officials
Three bodies recovered in an area of Baja California are likely to be those of the two Australians and an American who went missing last weekend during a camping and surfing trip, the state prosecutor’s office said Saturday.
Princess Anne lays wreath at B.C. veteran's cemetery; receives 21-gun salute
Princess Anne paid tribute to veterans buried at a cemetery in British Columbia today, laying a wreath to honour the more than 2,500 military personnel and family members buried there.
Mystik Dan wins the 150th Kentucky Derby at Churchill Downs in a three-horse photo finish
Mystik Dan won the 150th Kentucky Derby in a photo finish, edging out Forever Young and Sierra Leone for the upset victory.
'I just can't believe that it took so long': Body found in wreckage 3 months after deadly fire
A man accused of arson in a January Old Strathcona apartment fire is expected to be charged with manslaughter after a body was discovered in the burned building late last month.
Quebec police hand out hundreds of tickets to Hells Angels and other bikers before 'first run' meeting
Quebec provincial police handed out hundreds of fines to Hells Angels members and other supporting motorcycle clubs who met for their 'first run' in a small town near Sherbrooke, Que.
Work stoppage possible as WestJet issues lockout notice to maintenance engineers' union
A lockout notice issued by WestJet to a union representing aircraft maintenance engineers could result in a work stoppage next week.
London Drugs begins 'gradual reopening' on 7th day after cyberattack
Almost a week after all London Drugs stores across Western Canada abruptly closed amid a cyberattack, they began a "gradual reopening" on Saturday.