
Apple and WhatsApp have both issued critical security patches.
Along with Apple’s ImageIO vulnerability (CVE-2025-43300), a recently found zero-click flaw in WhatsApp (CVE-2025-55177) is being aggressively used in complex attacks against users of iOS and macOS.
Because the exploit doesn’t involve user engagement, it allows attackers to obtain sensitive information about high-value targets, such as human rights campaigners and journalists.