Undisclosed HomeKit Flaw Exploited by Authorities to Attack Serbian Journalists

Serbian authorities are suspected of exploiting an unknown flaw in Apple's HomeKit to install Pegasus spyware without any user interaction on target devices. A report from Amnesty International details the use of both Pegasus and a locally developed tool called NoviSpy, with capabilities including scraping messages, emails, photos, media files, and turning a phone into a surveillance tool.

Pegasus is not the only threat; governments and organizations worldwide have deployed it against journalists, human rights defenders, and opposition leaders. The exploit of vulnerabilities within Apple's HomeKit system raises concerns over the security of iMessage and other platforms. While Apple has introduced features like Lockdown Mode to protect users from sophisticated attacks, the ongoing challenge remains evident.