Given that the primary exploit here is in iOS (in the image processing library), the one in WhatsApp just allowed the other to be triggered easily, it is very likely that Signal is at risk too. Accept a message in Signal that contains an "image" from a malicious sender and your device is owned.

Don't forget to scan your iPhone with Am I Secure? to detect installed spyware. Available on the App Store.

#BreakingNews #CyberSecurity #iPhoneHack #spyware

Still a problem for sure, but quite different than spyware being installed on her phone.

Advanced threat actors don’t burn million-dollar iOS exploits by compromising a phone and then immediately using the contacts list on it to cause trouble. They stay quiet and collect intel for months or years.

Consultez Am I Secure? car il ne repose pas sur des indicateurs de compromission (IoC) publics qui changent rapidement une fois exposés. C'est pourquoi les gouvernements membres de l'OTAN font confiance à nos outils d'analyse forensic pour détecter les menaces qui, autrement, resteraient cachées.

Para los periodistas, ofrecemos asistencia gratuita contra el software espía. Ponte en contacto con support@numbersstation.app para acceder gratuitamente a nuestra solución Am I Secure? (disponible en la App Store).

Ideally they'd be using a completely closed network so only specific users could send/receive messages, to reduce the chance of a message/attachment/notification containing a 0/1-click exploit being delivered to the app and being processed. Wonder if all global TeleMessage users can msg each other?

If you've received a threat notification from Apple, get in touch, we provide free forensic assistance as well as ongoing spyware detection via our Am I Secure? app. A unique solution that performs deep analysis of system diagnostic data from your iPhone.

apps.apple.com/app/am-i-sec...

If you are on an iOS device, Apple's Safety Check is highly recommended for domestic abuse scenarios.

support.apple.com/en-gb/guide/...

True enough, it is a step in the right direction. We are just worried that many will look at this and go "problem solved" or think a large barrier has been erected to bad behaviour by these companies.

iOS: free access to “Am I Secure?” & “Am I Secure? for Work” apps (App Store)
Android: Upload system diagnostic data for free analysis

Email electionsecurity@numbersstation.app from a party or media org email address (for verification of being affiliated with one)

Ottawa-based, Canadian-owned.