WhatsApp has issued a essential safety advisory addressing a newly found zero-day vulnerability, tracked as CVE-2025-55177, which has been exploited in extremely subtle zero-click assaults focusing on Mac and iOS customers.<\/p>\n

The vulnerability, mixed with an OS-level flaw (CVE-2025-43300<\/a>), has raised alarms concerning the potential compromise of consumer gadgets and information, together with delicate messages.<\/p>\n

Vulnerability Particulars<\/strong><\/h2>\nThe Vulnerability uncovered<\/a> by WhatsApp\u2019s investigation, detailed in a Friday safety advisory<\/a>, revealed that the flaw stems from an \u201cincomplete authorization of linked gadget synchronization messages\u201d in WhatsApp for iOS (previous to model 2.25.21.73), WhatsApp Enterprise for iOS (previous to v2.25.21.78), and WhatsApp for Mac (previous to v2.25.21.78). <\/p>\n
This vulnerability allowed an unrelated consumer to set off the processing of content material from an arbitrary URL on a goal\u2019s gadget, bypassing the necessity for any consumer interplay\u2014therefore the \u201czero-click\u201d designation.<\/p>\n
The severity escalated when it was found that this WhatsApp flaw was exploited at the side of CVE-2025-43300<\/a>, an out-of-bounds write vulnerability in Apple\u2019s ImageIO framework. <\/p>\n
Apple had beforehand patched this OS-level situation, confirming its exploitation in \u201cextraordinarily subtle assaults towards particular focused people.\u201d <\/p>\n
The mix of those vulnerabilities created a potent assault vector, probably resulting in reminiscence corruption and unauthorized entry to gadget information.<\/p>\n
Ongoing Investigation<\/strong><\/h2>\n
The incident has prompted an lively investigation by Amnesty Worldwide\u2019s Safety Lab, which is inspecting instances involving a number of people focused on this marketing campaign. <\/p>\n
Early indications recommend that the WhatsApp assault<\/a> is impacting each iPhone and Android customers, with civil society people, together with journalists and human rights defenders, amongst these affected. <\/p>\n
\n
\n
\n
\ud83d\udea8 BREAKING: New zero-click exploit used to hack WhatsApp customers.<\/p>\n
WhatsApp has simply despatched out a spherical of risk notifications to people they imagine the place focused by a sophisticated adware marketing campaign in previous 90 days. <\/p>\n
Hunt down skilled assist in case you have acquired this alert pic.twitter.com\/i4cHLsiNOr<\/a><\/p>\n
\u2014 Donncha \u00d3 Cearbhaill (@DonnchaC) August 29, 2025<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n
The persistent risk of presidency adware continues to hazard these teams, underscoring the necessity for strong protecting measures.<\/p>\n
Notably, the Apple vulnerability (CVE-2025-43300) resides in a core picture library, that means it may probably be exploited by way of different purposes moreover WhatsApp. <\/p>\n
\u201cCVE-2025-55177, an authorization bypass in WhatsApp on iOS and Mac, allowed attackers to drive \u201ccontent material from an arbitrary URL\u201d to be rendered on a goal\u2019s gadget.\u201d<\/p>\n
WhatsApp and safety specialists advise the next steps to mitigate dangers:<\/p>\n
\n
Replace WhatsApp to the newest model (iOS v2.25.21.73 or later, Enterprise iOS v2.25.21.78 or later, Mac v2.25.21.78 or later).<\/li>\n
Set up the newest working system updates for iOS, iPadOS, and macOS.<\/li>\n
Allow enhanced safety features corresponding to Lockdown Mode on iOS or Superior Safety on Android.<\/li>\n<\/ul>\n
Discover this Information Fascinating! Observe us on\u00a0Google Information<\/a>,\u00a0 LinkedIn<\/a>, and\u00a0 X<\/a>\u00a0to Get Instantaneous Updates!<\/strong><\/p>\n<\/div>\n
<\/script>
\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
WhatsApp has issued a essential safety advisory addressing a newly found zero-day vulnerability, tracked as CVE-2025-55177, which has been exploited in extremely subtle zero-click assaults focusing on Mac and iOS customers. The vulnerability, mixed with an OS-level flaw (CVE-2025-43300), has raised alarms concerning the potential compromise of consumer gadgets and information, together with delicate messages. […]<\/p>\n","protected":false},"author":2,"featured_media":6116,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[58],"tags":[5007,1395,145,355,1994,940,1061,3262,4218],"class_list":["post-6114","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-0click","tag-apple","tag-attacks","tag-devices","tag-exploited","tag-hack","tag-vulnerability","tag-whatsapp","tag-zeroday"],"_links":{"self":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/6114","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6114"}],"version-history":[{"count":1,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/6114\/revisions"}],"predecessor-version":[{"id":6115,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/6114\/revisions\/6115"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/media\/6116"}],"wp:attachment":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6114"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6114"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6114"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}