iPhone users targeted in Apple’s first zero-day exploit in 2025
The use-after-free flaw allows privilege escalation in affected media applications running on Apple’s Core Media framework.
Apple fixes zero-day flaw affecting all devices
As part of this batch of software updates, Apple also released several patches fixing security bugs, including a zero-day bug that “may have been actively exploited” — meaning hackers were using it to compromise devices — against users with iPhones running software older than iOS 17.2, which was released in December 2023.
Apple Urges Immediate Updates to Fix Zero-Day Vulnerability in iPhones and Macs
Apple has released critical software updates across its ecosystem to patch multiple security vulnerabilities, including an actively exploited zero-day flaw, CVE-2025-24085. This use-after-free bug in the Core Media component could allow malicious applications to gain elevated privileges.
Update Your iPhone: Apple Warns Hackers Exploiting iOS Flaw
The vulnerability has also prompted Apple to issue patches for macOS Sequoia and even the company's Vision Pro headset.
Apple Patches Actively Exploited Zero-Day Affecting iPhones, Macs, and More
Apple addresses a zero-day flaw (CVE-2025-24085) and fixes 9 vulnerabilities in iOS 18.3, macOS Sequoia 15.3, and more.
Apple just patched its first zero-day flaw of the year — update your iPhone and Mac right now
Apple has fixed a privilege escalation flaw in its Core Media framework that was used by hackers to attack iPhones running older versions of iOS.
CSOonline5h
How law enforcement agents gain access to encrypted devices
From traditional investigative methods to zero-day exploits, authorities have a range of techniques at their disposal, ...
Attackers exploit zero-day vulnerability in Zyxel CPE devices
The critical command-injection vulnerability, tracked as CVE-2024-40891, allows an attacker to execute arbitrary commands on ...
Tesla Hacked 4 Times In One Day—What You Need To Know
Hackers have managed to compromise Tesla charging security no less than four times in one day of hacking hysteria. Here’s ...
Hackers exploit 16 zero-days on first day of Pwn2Own Automotive 2025
On the first day of Pwn2Own Automotive 2025, security researchers exploited 16 unique zero-days and collected $382,750 in ...
The Register on MSN9d
Patch procrastination leaves 50,000 Fortinet firewalls vulnerable to zero-day
Data from the Shadowserver Foundation shows 48,457 Fortinet boxes are still publicly exposed and haven't had the patch for CVE-2024-55591 applied, despite stark warnings issued over the past seven ...
‘Zero Day’ Official Trailer Picks Up After Catastrophic U.S. Cyberattack
After chaos and casualties ensue, Robert De Niro's former POTUS is recruited to investigate the attack in Netflix's limited ...
Bleeping Computer1d
Latest Zero-Day news
A relatively new Mirai-based botnet has been growing in sophistication and is now leveraging zero-day exploits for security flaws in industrial routers and smart home devices. The Serbian ...
Seraphic raises $29M to secure browsers in the enterprise
Seraphic injects an abstraction layer between executing code and a browser’s JavaScript engine that protects against zero-day ...
Network World7d
81% of firms back a Zero Trust approach to cyber defense
A recent survey of cybersecurity professionals indicates that 81% of organizations are turning to zero trust as the ...