Google Project Zero Research into iMessage's Zero-click Attack
We discuss Google Project Zero’s recent research into developing a “zero-click” exploit chain against iOS 13's implementation of iMessage, as well as the newer mitigations Apple has introduced against this class of attack. The mitigations involve strengthening of ASLR (“address space layout randomisation”) in specific scenarios, as well as features introduced specifically to thwart this attack.