Apple releases urgent fix for critical WebKit flaws exploited by spyware on iPhones

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Apple Issues Critical WebKit Update for Vulnerable iPhones Apple has released an urgent security update to address critical vulnerabilities in WebKit that have been exploited by spyware targeting iPhones. The flaws, identified as CVE-2025-43529 and CVE-2025-14174, affect the memory management of outdated devices, leading to potential security breaches. Users have been reluctant to install the new system update, leaving their devices vulnerable. 2 sources 63