http://www.fudzilla.com/news/mobile/...ulnerabilities

On Thursday, Apple issued three important zero-day security vulnerability patches in a new iOS 9.3.5 release of its mobile operating system, with some sources claiming that the exploits are particularly fatal to human rights activists and other individuals who work or act to protect human rights around the world.


Canadian security research organization CitizenLab reports that award-winning activist Ahmed Mansoor, based in the United Arab Emirates, received SMS messages on his phone on August 11th and 12th containing linkbait promising him information and ?new secrets? about detainees being tortured in UAE jail cells. Instead of clicking the link, he forwarded the message to CitizenLab and the organization was able to confirm not one, but three highly suspicious exploits in iOS, including a government-exclusive ?lawful intercept? product.
A collaborative investigation between CitizenLab and Lookout Security discovered a chain of zero-day exploits that ?would have remotely jailbroken Mansoor?s stock iPhone 6 and installed sophisticated spyware.? In particular, the link in question would have executed arbitrary code through the WebKit webpage layout engine to gain access to the iOS kernel and execute code from there.