Clément Lecigne of Google’s Threat Analysis Group and Donncha Ó Cearbhaill of Amnesty International’s Security Lab discovered the vulnerabilities as part of an exploit chain. While Apple did not elaborate on who was behind the exploitation of these zero-day vulnerabilities, BleepingComputer suggested that the attackers might be state-sponsored, given the profile of the researchers who discovered the vulnerabilities.
