US EditionWhatsApp Security Warning - Zero-Click Bug Hits Apple Users with Spyware, so Update Now
WhatsApp patched a zero-click vulnerability exploited over three months, with fewer than 200 users notified of potential targeted spyware attacks exploiting linked device synchronization flaws.
- On Friday, WhatsApp said it had fixed a zero-click vulnerability discovered by the WhatsApp Security Team and sent fewer than 200 notifications to potentially affected users.
- The vulnerability stemmed from CVE-2025-55177, an incomplete authorization bug in WhatsApp, chained with Apple OS flaw CVE-2025-43300, enabling a zero-click exploit used in a three-month targeted spyware campaign.
- WhatsApp listed affected versions including WhatsApp for iOS v2.25.21.73, WhatsApp Business for iOS v2.25.21.78 and WhatsApp for Mac v2.25.21.78; dozens of users were hit and advised a full factory reset, with patches now available.
- Officials urged immediate updates and extra protections, with Apple calling the attack `extremely sophisticated` and recommending Lockdown Mode and Advanced Protection Mode.
- Security experts warn this fits a known pattern, with zero-click exploits used by nation-states; Amnesty International’s Security Lab calls it highly sophisticated, and a US court ordered NSO Group to pay WhatsApp $167 million for prior hacks.
12 Articles
12 Articles
WhatsApp just got hit with a stealthy spyware attack
‼️ WhatsApp just got hit with a stealthy spyware attack: No clicks, no links, just boom, you’re infected. If you’re on iPhone or Mac and haven’t updated WhatsApp in the last day, do it now. This one’s next-level sneaky and initially targeted journalists, so don’t wait to find out if you’re next. The post WhatsApp just got hit with a stealthy spyware attack appeared first on Komando.com.
A recently closed vulnerability in Whatsapp allowed Apple users to infect devices without using malware. Attackers only needed their victims' phone number. It's not the first attack of this kind.
The spectrum of targeted cyber-espionage comes back to haunt encrypted messaging. WhatsApp, owned by Meta, confirmed on Friday that it had sealed a vulnerability exploited as part of a sophisticated attack targeting less than 200 users worldwide. This offensive, which combines one flaw in the application and another in Apple devices, shows that even [...]
Coverage Details
Bias Distribution
- 50% of the sources lean Left, 50% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
