Apple and Meta Patch Zero-Day Exploited in Sophisticated Surveillanceware Attacks
3 sources · Updated 4mo ago · First seen Sep 17, 2025
Apple and Meta have patched a critical zero-day vulnerability (CVE-2025-43300) in the ImageIO framework, which was reportedly exploited in highly targeted attacks. Meta warned that attackers may have chained this Apple OS-level flaw with a WhatsApp bug (CVE-2025-55177) to target specific users, likely via commercial surveillanceware. Amnesty International and other researchers are investigating the campaign, which appears to impact both iOS and Android users, including civil society members.
Do you run this?See affected versions and whether adversaries are exploiting it against assets like yours.
Check your exposure
