Urgent: WhatsApp Releases Emergency Update to Protect iOS and macOS Users from Zero-Click Exploits

Recently, WhatsApp revealed a serious security flaw affecting its apps for iOS and macOS. This vulnerability, identified as CVE-2025-55177, has a high severity score of 8.0. It relates to poor authorization of device synchronization messages, potentially allowing hackers to exploit it and send harmful content to a target’s device.

The flaw was discovered by the WhatsApp Security Team, and it’s tied to another vulnerability, CVE-2025-43300, which Apple disclosed recently. This second flaw can lead to memory corruption when malicious images are processed. It appears both vulnerabilities were used together in targeted attacks against specific users.

WhatsApp has reported that some individuals had been targeted by advanced spyware campaigns using this flaw. Donncha Ó Cearbhaill from Amnesty International noted that the spyware attacks did not require any user interaction, making them particularly dangerous. He stated that the attacks are affecting both iOS and Android users, including those from civil society, journalists, and human rights defenders.

In response to these threats, WhatsApp advised affected users to perform a full device reset and to keep their apps and operating systems updated. This advice is crucial, considering the increasing sophistication of cyberattacks. According to recent data from cybersecurity sources, vulnerabilities like these are on the rise, with a reported increase of over 20% in exploits targeting messaging apps.

To stay safe, users should be vigilant and immediately update their apps to the latest versions:

• WhatsApp for iOS: 2.25.21.73 or later
• WhatsApp Business for iOS: 2.25.21.78 or later
• WhatsApp for Mac: 2.25.21.78 or later

As technology continues to evolve, so too do the methods used by attackers. Staying informed and taking preventive measures is key. For more insights into protecting your digital security, check resources from trusted organizations like the Cybersecurity and Infrastructure Security Agency.

Source link

cyber security news, cyber news, cyber security news today, cyber security updates, cyber updates, hacker news, hacking news, software vulnerability, cyber attacks, data breach, ransomware malware, how to hack, network security, information security, the hacker news, computer security