Operation_Triangulation__2024__Operation_Triangulation_The_last_hardware_mystery_Securelist.pdf

Operation Triangulation is a multi-stage, 0-click iMessage exploit chain (affecting iOS up to 16.2) that chained four zero-days to gain kernel memory access, bypass Apple’s hardware Page Protection Layer using undocumented GPU MMIO/CoreSight registers and a custom ECC-based validation, then escalated to root and delivered spyware; the report provides detailed reverse-engineering of the exploit stages, MMIO register usage, hash/ECC algorithm, CVE references, and describes Apple’s mitigations while leaving open how attackers discovered the hidden hardware feature.