Apple has released macOS and iOS updates to patch two WebKit zero-days exploited in an “extremely sophisticated” attack. The post Apple Patches Two Zero-Days Tied to Mysterious Exploited Chrome Flaw appeared first on SecurityWeek .
The two security defects impact FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager with FortiCloud SSO login authentication enabled. The post Fortinet Patches Critical Authentication Bypass Vulnerabilities appeared first on SecurityWeek .
Apple has released iOS 26.1 and macOS Tahoe 26.1 with patches for over 100 vulnerabilities, including critical flaws. The post Apple Patches 19 WebKit Vulnerabilities appeared first on SecurityWeek .
Other noteworthy stories that might have slipped under the radar: Everest group takes credit for Collins Aerospace hack, Maryland launches VDP, gamers targeted with red teaming tool and RAT. The post In Other News: iOS 26 Deletes Spyware Evidence, Shadow Escape Attack, Cyber Exec Sold Secrets to Russia appeared first on SecurityWeek .
Apple has released patches for a security vulnerability identified as CVE-2025-43400 affecting the Font Parser component across multiple versions of iOS, macOS, and visionOS. The flaw involves processing maliciously crafted fonts that may cause unexpected application termination or corrupt process memory. While remote code execution exploitation is not confirmed, the vulnerability poses risks to system stability and potential memory corruption. No known exploits have been reported in the wild so far. The vulnerability affects a broad range of Apple operating systems, including iOS 18 and 26, macOS Sonoma (14) and later, and visionOS 26. Updates for WatchOS and tvOS were released but do not address security issues. European organizations using Apple devices should prioritize patching to mitigate risks, especially those in sectors reliant on Apple ecosystems. Countries with high Apple device penetration and critical infrastructure using Apple products are more likely to be impacted. Given the medium severity and absence of confirmed remote code execution, the threat is assessed as medium but warrants timely remediation to prevent potential exploitation.
A new spyware campaign dubbed SparkKitty has been discovered targeting both iOS and Android devices. The malware, believed to be connected to the previously identified SparkCat campaign, is distributed through official app stores and unofficial sources. It primarily steals photos from infected devices, likely searching for cryptocurrency wallet information. The campaign has been active since at least February 2024 and mainly targets users in Southeast Asia and China. The malware is embedded in various apps, including modified versions of popular applications like TikTok, and uses different techniques to evade detection. The researchers identified multiple variations of the malware, including obfuscated libraries and malicious frameworks mimicking legitimate ones.
Graphite is a sophisticated mercenary spyware developed by the Paragon group that exploits a zero-click vulnerability (CVE-2025-43200) in iOS 18.2.1 via iMessage, enabling silent device compromise without user interaction. Forensic evidence confirms targeted attacks against European journalists, threatening press freedom and digital privacy. The spyware communicates with a command-and-control server at IP 46.183.184.91 and uses a unique iMessage account, indicating a well-resourced infrastructure. The Italian government acknowledged limited use of Graphite but denied involvement in these specific attacks. The zero-click nature and stealthy operation make detection and prevention extremely difficult, risking exposure of sensitive communications and confidential sources.
Two zero-day vulnerabilities affecting Apple devices running iOS 15 and macOS Monterey were actively exploited and patched in August 2022. One is a kernel out-of-bounds write flaw allowing arbitrary code execution with kernel privileges (CVE-2022-32894). The other is a WebKit out-of-bounds write vulnerability enabling code execution via malicious web content (CVE-2022-32893). Apple released patches in iOS 15.6.1 and macOS Monterey 12.5.1 to address these issues. Users were urged to update immediately due to active exploitation reports.
