This is being publicized only now. The issues were patched in September, the exploit was being used as of February, and it took some time for someone to notice

This is being publicized only now. The issues were patched in September, the exploit was being used as of February, and it took some time for someone to notice that an @state.gov Apple ID was among the compromised phones.