Apple 0

Cybersecuritynews •Guru Baran • December 13, 2025

Apple patches two WebKit zero-day flaws actively exploited in sophisticated attacks targeting specific iPhone users running iOS versions prior to 26. The iOS 26.2 and iPadOS 26.2 updates, released December 12, 2025, address CVE-2025-43529 and CVE-2025-14174 in WebKit. CVE-2025-43529 involves a use-after-free vulnerability enabling arbitrary code execution via malicious web content, discovered by Google Threat […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Apple Addresses Zero-Day Flaw Exploited in Sophisticated Attacks Apple has released security updates to address a zero-day vulnerability, tracked as CVE-2026-20700, that was exploited in highly sophisticated attacks targeting specific individuals. The flaw, an arbitrary code execution vulnerability in dyld, affects multiple Apple operating systems, including iOS and macOS, allowing attackers with memory write capability to execute arbitrary code on affected devices. 51 sources 60

Extracted Entities

Apple 0

The full story

Extracted Entities

Attack Types (1)

CVEs (2)

MITRE ATT&CK (1)

Platforms (2)