⚡ Weekly Recap: iPhone Spyware, Microsoft 0-Day, Token Break Hack, AI Data Leaks and More

Summary: Apple disclosed that CVE-2025-43200, a zero-click flaw in its Messages app, was actively exploited in the wild and patched in February across iOS 18.3.1, iPadOS 18.3.1, macOS Sequoia 15.3.1 and related releases. The Citizen Lab said it found forensic evidence the flaw was used to infect Italian journalist Ciro Pellegrino and an unnamed prominent European journalist with Paragon's Graphite mercenary spyware.
What's compelling: A zero-click Messages exploit tied to mercenary spyware reached working journalists before the patch shipped, which means targets did nothing to trigger it. The week's patch list also spans Microsoft 365 Copilot, PAN-OS, GitLab and Ivanti Workspace Control, so the exposure is not confined to one platform.

Read the original at The Hacker News ↗

Topics: Zero-Days & Exploits
Mentions: CVE-2024-41713 CVE-2025-0673 CVE-2025-22455 CVE-2025-22463 CVE-2025-2254 CVE-2025-24016 CVE-2025-26521 CVE-2025-2884 CVE-2025-3052 CVE-2025-31022 CVE-2025-32711 CVE-2025-33053 CVE-2025-33108 CVE-2025-36631 CVE-2025-36632 CVE-2025-36633 CVE-2025-3835 CVE-2025-4230 CVE-2025-4232 CVE-2025-4278 CVE-2025-42989 CVE-2025-43200 CVE-2025-43697 CVE-2025-43698 CVE-2025-43699 CVE-2025-43700 CVE-2025-43701 CVE-2025-47110 CVE-2025-47934 CVE-2025-47950 CVE-2025-49212 CVE-2025-49213 CVE-2025-49216 CVE-2025-49217 CVE-2025-49219 CVE-2025-4922 CVE-2025-49220 CVE-2025-5121 CVE-2025-5353 CVE-2025-5484 CVE-2025-5485 CVE-2025-5958 CVE-2025-6029
Related: ⚡ Weekly Recap: Share Point 0-Day, Chrome Exploit, macOS Spyware, NVIDIA Toolkit RCE and More Cyber Risks ·
CVE-2025-43200: Apple Multiple Products Unspecified Vulnerability Known Exploited Vulnerabilities · Jun 16, 2025
CVE-2025-24016: Wazuh Server Deserialization of Untrusted Data Vulnerability Known Exploited Vulnerabilities · Jun 10, 2025