"Government and Tech Giants Warn of Increasing Spyware Threats to Mobile Devices"

CISA has ordered federal agencies to patch five security vulnerabilities exploited in recent attacks to install commercial spyware on mobile devices. The vulnerabilities were abused in two separate highly-targeted campaigns targeting Android and iOS users. CISA has added the five vulnerabilities to its Known Exploited Vulnerabilities catalog and given Federal Civilian Executive Branch Agencies three weeks to patch vulnerable mobile devices. CISA strongly urged all organizations to prioritize patching these bugs to thwart exploitation attempts.