Researchers describe a 90-day spyware operation using a WhatsApp authorization bypass paired with Apple’s ImageIO flaw to silently take over select devices.
