Even iPhones were vulnerable to the surveillance software, which appears to have been used against activists, journalists, and others.