Apple patches two zero-days under attack (CVE-2023-41064, CVE-2023-41061)

Apple has patched two zero-day vulnerabilities exploited to deliver NSO Group’s Pegasus spyware.

“The exploit chain was capable of compromising iPhones running the latest version of iOS without any interaction from the victim,” Citizen Lab shared.

CVE-2023-41061 is a validation issue in Apple’s Wallet, where users can store payment cards, IDs, event tickets, traveling tickets, etc.

CVE-2023-41064 was reported by The Citizen Lab at The University of Torontoʼs Munk School, while CVE-2023-41061 was figured out by Apple with their help, probably as they were validating the existence of CVE-2023-41064.

The exploit chain – dubbed BLASTPASS by Citizen Lab – was detected when they analyzed a device of an individual employed by a Washington DC-based civil society organization with international offices.

Another good idea for users that run the latest versions of Apple’s operating systems is to enable Apple Rapid Security Response, which automatically installs security patches as they are made available.

Share this article on social media:

Subscribe to Our Newsletter!
Stay on top of cybersecurity risks, evolving threats and industry news.
This field is for validation purposes and should be left unchanged.

The Latest Cybersecurity News

From major cyberattacks, newly discovered critical vulnerabilities to recommended best practices, read it here first:

Tell us About your Needs
Get an Answer the Same Business Day

Got an urgent request? Call us at 1-877-805-7475 or Book a meeting.

What happens next:

  • We reach out to learn about your objectives
  • We work together to define your project’s scope
  • You get an all-inclusive, no engagement proposal
This field is for validation purposes and should be left unchanged.


Enter your Email Address

This field is for validation purposes and should be left unchanged.

* No free email provider (e.g:,, etc.)



Everything You Need to Know

Gain confidence in your future cybersecurity assessments by learning to effectively plan, scope and execute projects.
This site is registered on as a development site. Switch to a production site key to remove this banner.