While inspecting the Apple device of an employee of a Washington-based civil society group last week, Citizen Lab found the flaw had been used to infect the