Apple Patches Two Zero-Day Flaws Used in Targeted iPhone Attacks
Apple has released emergency security updates to fix two zero-day vulnerabilities exploited in an “extremely sophisticated attack” against specific targets’ iPhones. The two bugs, CVE-2025-31200 and CVE-2025-31201, were found in CoreAudio and RPAC, respectively. CVE-2025-31200 allows attackers to execute remote code on a device by processing maliciously crafted media files. CVE-2025-31201 enables attackers with read … Read more