WhatsApp patches critical zero-day vulnerabilities exploited in iOS and Mac hacks

WhatsApp has patched a zero-click security vulnerability (CVE-2025-55177) in its iOS and macOS clients that was exploited in targeted zero-day attacks, potentially allowing attackers to process malicious content on users' devices. The vulnerability was linked to an OS-level flaw (CVE-2025-43300) exploited in sophisticated spyware campaigns, prompting affected users to reset their devices and update their software. This follows previous zero-day patches by WhatsApp, including one used to install spyware targeting journalists and civil society members.