Hackers chained Apple and WhatsApp flaws in spyware campaign - 9to5Mac

A few days ago, Apple fixed a vulnerability on iOS and macOS that “may have been exploited in an extremely sophisticated attack against specific targeted individuals.” Now, new details have emerged, and it appears that the hacking campaign also leveraged a now-fixed WhatsApp flaw to target its victims.Here are the details.Meta warns dozens of potentially affected users As reported by , Meta has confirmed that it fixed a WhatsApp flaw (CVE-2025-55177) that, when used in combination with the flaw that Apple recently fixed on iOS and macOS (CVE-2025-43300), could “allow an attacker to deliver a malicious exploit” and steal user data.

The report came after Donncha Ó Cearbhaill, Head of Security Lab at Amnesty International posted on X about Meta contacting users who may have been targeted by the flaw.Meta’s advisory reads: As noted, it is currently unclear exactly who was behind the attack, or how many people were affected, beyond Meta’s statement that it has sent “less than 200” notifications to potentially targeted individuals.To be clear, both Apple and Meta have issued fixes for these vulnerabilities, so even if you are not a high-profile individual, it may be a good idea to make sure that your devices and apps are up to date.

Now that the details about the flaws have been made public, attacks looking to exploit outdated devices and apps are bound to increase.Accessory deals on Amazon Apple AirTag 4 Pack, 29% off Apple AirTag, 21% off Beats USB-C to USB-C Woven Short Cable, 19% off Wireless CarPlay adapter, $10 off   You’re reading 9to5Mac — experts who break news about Apple and its surrounding ecosystem, day after day.Be sure to check out our homepage for all the latest news, and follow 9to5Mac on Twitter, Facebook, and LinkedIn to stay in the loop.

Don’t know where to start? Check out our exclusive stories, reviews, how-tos, and subscribe to our YouTube channel

Read More
Related Posts