Paragon’s Spyware Strikes Again: iPhone Zero-Click Attacks Target European Journalists!
Citizen Lab confirms Paragon’s Graphite spyware targeted iOS devices in zero-click attacks on at least two journalists in Europe. The spyware exploited a zero-day flaw in iOS, turning innocuous iCloud links into digital Trojan horses. Apple fixed the issue, but zero-click attacks remain the ultimate stealth mode for digital espionage.

Hot Take:
Looks like Apple’s iOS devices are more popular with cyber spies than a secret agent’s phone book. Paragon’s Graphite spyware is the latest star in a zero-click thriller, and it seems iPhones are the unwitting guest stars. Citizen Lab’s forensic team is acting like the Sherlock Holmes of the digital age, piecing together the clues left behind by these sneaky saboteurs. Meanwhile, iPhone users everywhere are giving their devices the side-eye, wondering if they’re the next cameo in this espionage escapade.
Key Points:
- Paragon’s Graphite spyware used in zero-click attacks on Apple iOS devices.
- Victims include two European journalists, one requesting anonymity, and Ciro Pellegrino.
- Exploited CVE-2025-43200, a zero-day vulnerability in iOS 18.2.1.
- Apple patched the vulnerability in iOS 18.3.1, but the CVE was added to the bulletin later.
- Graphite spyware delivered via iMessage without user interaction.