Apple Patches CVE-2025-43300 Zero-Day in iOS, iPadOS, and macOS Exploited in Targeted Attacks

Threat Score:
80
The Hacker News
6 hours ago

Overview

Apple has released security updates to address a security flaw impacting iOS, iPadOS, and macOS that it said has come under active exploitation in the wild. The zero-day out-of-bounds write vulnerability, tracked as CVE-2025-43300, resides in theImageIO frameworkthat could result in memory corruption when processing a malicious image. "Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals," the company said i...

Related Articles

5 articles
2

Critical Apache Tika PDF Parser Vulnerability Allow Attackers to Access Sensitive Data

Cybersecurity News • 4 hours ago

A critical security vulnerability has been discovered in Apache Tika’s PDF parser module that could enable attackers to access sensitive data and trigger malicious requests to internal systems.  The flaw, designated as CVE-2025-54988, affects multiple versions of the widely used document parsing library and has been assigned a critical severity rating by security researchers. Key […]

Score
85
Read more
3

Apple Confirms Critical 0-Day Under Active Attack – Immediate Update Urged

GB Hackers • 5 hours ago

Apple Confirms Critical 0-Day Under Active Attack – Immediate Update Urged Apple has issued an emergency security update for iOS 18.6.2 and iPadOS 18.6.2 to address a critical zero-day vulnerability that the company confirms is being actively exploited in sophisticated attacks against targeted individuals. The update,releasedon August 20, 2025, patches a severe flaw in the ImageIO component that could allow attackers to execute malicious code through specially crafted image files. Critical Vulne

Score
85
Read more
4

22-year-old Operator of ‘Rapper Bot’ Botnet Charged for Launching 3 Tbps DDoS Attack

GB Hackers • 3 hours ago

22-year-old Operator of ‘Rapper Bot’ Botnet Charged for Launching 3 Tbps DDoS Attack Federal authorities have charged a 22-year-old Oregon man with operating one of the most powerful distributed denial-of-service (DDoS) botnets ever discovered, marking a significant victory in the ongoing battle against cybercriminal infrastructure. Ethan Foltz of Eugene, Oregon, faces federal charges for allegedly developing and administering the “Rapper Bot” DDoS-for-hire service, which has been conducting lar

Score
84
Read more