January 2019 — Google Project Zero finds in-the-wild iOS exploit chain
Data compromised
Passwords, contacts, messages, location
Technical writeup
Google researchers found exploit: visiting wrong site could install monitoring spyware (passwords, contacts, messages). Apple patched in 10 days; targeted 'fewer than a dozen' sites (Uighur-related).
Root cause
Exploit in iOS; targeted sites.