Last week, while checking the device of an individual employed by a Washington DC-based civil society organization with international offices, Citizen Lab found an actively exploited zero-click vulnerability being used to deliver NSO Group's Pegasus mercenary spyware. Citizen Lab immediately disclosed our findings to Apple and assisted in their investigation. Apple issued two CVEs related to this exploit chain (CVE-2023-41064 and CVE-2023-41061) Update Apple Devices Now I urge everyone to immediately update their devices!