For several months, attackers quietly chained together flaws in WhatsApp and Apple’s software to slip spyware onto iPhones and Macs. Both companies have now issued patches, but the way the attack worked shows how quickly surveillance operators move when fresh bugs appear.