Apple has patched a critical zero-day vulnerability (CVE-2025-43300) in older iPhones and iPads that was actively exploited by cybercriminals in targeted attacks. The flaw affects the Image I/O framework and can lead to system crashes, data corruption, and remote code execution through mal...
Apple has released emergency security updates to fix CVE-2025-43300, a critical zero-day vulnerability in the ImageIO framework that's being actively exploited in sophisticated targeted attacks. The flaw allows attackers to gain device control through malicious images and affects iOS, iPad...
Apple has released urgent security updates to patch CVE-2025-6558, a critical zero-day vulnerability in ANGLE graphics layer that was actively exploited in Chrome attacks. The flaw allows remote code execution through malicious web pages and potential browser sandbox escape. Discovered by ...
Apple has released critical security updates to patch a zero-day vulnerability (CVE-2025-24201) in WebKit that was exploited in "extremely sophisticated" targeted attacks. The flaw allowed attackers to escape the Web Content sandbox through maliciously crafted web content. Updates have bee...
A new variant of XCSSET malware targets macOS users with enhanced capabilities, featuring improved code obfuscation and persistence mechanisms. The malware, discovered by Microsoft's Threat Intelligence team, spreads through infected Xcode projects and focuses on stealing sensitive data in...
