A security flaw affecting Apple's iMessage made even the newest devices vulnerable to infection by Pegasus spyware that hit tens of thousands including French President Macron.