WhatsApp has confirmed a sophisticated cyberattack that exploited a previously unknown zero-day vulnerability to compromise Apple devices.
The flaw, now tracked as CVE-2025-55177, was used in a targeted campaign against specific users on iOS and macOS platforms.
Attackers chained this WhatsApp flaw with another vulnerability in Apple’s operating systems, creating a powerful exploit chain.
This allowed them to bypass security protections, gain unauthorized access, and potentially exfiltrate sensitive data from targeted devices.
The initial entry vector was WhatsApp installations on iPhones and Macs, making it particularly concerning given the app’s vast global user base.
While WhatsApp has since issued a patch, security researchers note that the attack underscores the rising sophistication of zero-click exploits—attacks that require no user interaction.
These vulnerabilities are often highly valuable to state-sponsored actors and cybercriminals due to their ability to silently infiltrate devices.
Apple and WhatsApp have urged users to immediately update their devices and applications to the latest versions.
Cybersecurity experts caution that the incident highlights the importance of timely patching, layered defenses, and continuous monitoring.
The breach serves as a reminder that even widely trusted apps remain lucrative targets for advanced attackers.
See What’s Next in Tech With the Fast Forward Newsletter
Tweets From @varindiamag
Nothing to see here - yet
When they Tweet, their Tweets will show up here.
