Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

WhatsApp iOS and Mac security update for CVE-2025-55177

Security Patch Release
First reported
Last updated
Happening score
H score 20
1 unique sources, 1 articles

Summary

Hide ▲

WhatsApp released security updates for WhatsApp for iOS, WhatsApp Business for iOS, and WhatsApp for Mac after CVE-2025-55177 was linked to possible in-the-wild exploitation in targeted attacks. The patched flaw was an insufficient authorization issue in linked-device synchronization messages that could let an unrelated user trigger processing of content from an arbitrary URL on a target device. The affected builds were patched on July 28, 2025 and August 4, 2025, and the issue may have been chained with CVE-2025-43300 in a zero-click attack.

Related Happenings

Apple out-of-band iOS/iPadOS security updates (CVE-2026-28950)

Security Patch Release
H score28 First: 22.04.2026 23:58 Last: 22.04.2026 23:58 Sources 1

About this happening: Apple released out-of-band security updates for iPhone and iPad on April 22, 2026 to fix CVE-2026-28950. The patch addresses a Notification Services flaw t...

Latest development: 23.04.2026 11:50

Apple issued iOS 26.4.2, iPadOS 26.4.2, iOS 18.7.8, and iPadOS 18.7.8 on 2026-04-23 to close CVE-2026-28950, which could preserve deleted-message notifications on affected devices.

Open Happening

TP-Link security patch release for CVE-2025-15517

Security Patch Release
H score26 First: 25.03.2026 13:11 Last: 25.03.2026 13:11 Sources 1

About this happening: TP-Link released security updates for its Archer NX router series to close a critical authentication-bypass flaw that could let attackers upload firmware without loggi...

Open Happening

Apple iOS outdated-device exploit-kit mitigation advisory

Advisory/Mitigation
H score35 First: 20.03.2026 07:16 Last: 20.03.2026 07:16 Sources 1

About this happening: Apple is sending Lock Screen notifications to outdated iPhones and iPads after detecting active web-based attacks, urging users to install updates. The latest noti...

Open Happening

Apple Background Security Improvements WebKit patch (CVE-2026-20643)

Security Patch Release
H score37 First: 18.03.2026 03:06 Last: 18.03.2026 03:06 Sources 1

About this happening: Apple's first Background Security Improvements release patches CVE-2026-20643 in WebKit, letting iPhones, iPads, and Macs get a security fix without a full OS up...

Open Happening

Apple security patch release for CVE-2023-43010

Security Patch Release
H score38 First: 12.03.2026 11:58 Last: 12.03.2026 11:58 Sources 1

About this happening: Apple backported Coruna-linked WebKit fixes to older iOS and iPadOS devices, reducing exposure on legacy hardware that cannot move to the latest release. The update ex...

Open Happening

Timeline

  1. 30.08.2025 07:36 2 articles · 10mo ago

    WhatsApp patches CVE-2025-55177 in WhatsApp for iOS

    Mitigation Patch Update

    WhatsApp patched CVE-2025-55177 in WhatsApp for iOS prior to version 2.25.21.73, closing an insufficient-authorization flaw in linked-device synchronization messages that could let an unrelated user trigger processing of content from an arbitrary URL on a target's device.

    Show sources
    Open in new tab
  2. 30.08.2025 07:36 1 articles · 10mo ago

    WhatsApp patches CVE-2025-55177 in WhatsApp Business for iOS and WhatsApp for Mac

    Mitigation Patch Update

    WhatsApp patched CVE-2025-55177 in WhatsApp Business for iOS version 2.25.21.78 and WhatsApp for Mac version 2.25.21.78, addressing the same linked-device synchronization flaw after assessing that it may have been chained with CVE-2025-43300 in a sophisticated zero-click attack against specific targeted users.

    Show sources
    Open in new tab
  3. 30.08.2025 07:36 1 articles · 10mo ago

    WhatsApp notifies fewer than 200 users of possible spyware targeting

    Initial Disclosure

    WhatsApp sent in-app threat notifications to fewer than 200 users who may have been targeted in a campaign using CVE-2025-55177 and advised a full device factory reset plus keeping the operating system and WhatsApp up to date.

    Show sources
    Open in new tab