Find notable cyber news and cases, enriched with sources, timelines, and signals.

Safari WebKit crash and memory corruption flaws (multiple vulnerabilities)

Vulnerability
First reported
Last updated
Happening score
H score 7
1 unique sources, 1 articles

Summary

Hide ▲

Apple fixed five WebKit vulnerabilities in Safari and related platforms after Google Big Sleep found flaws that could trigger browser crashes or memory corruption when processing malicious web content. The set includes CVE-2025-43429, CVE-2025-43430, CVE-2025-43431, CVE-2025-43433, and CVE-2025-43434. Apple said the flaws were not flagged as exploited in the wild.

Related Happenings

Operation Triangulation updated iPhone espionage campaign

Campaign
First: 26.03.2026 15:10 Last: 26.03.2026 15:10 Sources 1

About this happening: The **Operation Triangulation** espionage lineage has resurfaced through **Coruna**, extending **zero-click iPhone** targeting to newer **A17** and **M3** devices and **iOS 17.2**...

Coruna iOS exploit analysis ties updated Triangulation kernel exploit lineage

Technical Analysis
First: 26.03.2026 15:10 Last: 26.03.2026 15:10 Sources 1

About this happening: **Coruna** has been linked to an **updated** exploit lineage from **Operation Triangulation**, showing that a long-running iPhone attack framework continues to evolve and can stil...

Coruna watering-hole and fake-site exploitation campaign

Campaign
First: 26.03.2026 13:07 Last: 26.03.2026 13:07 Sources 1

About this happening: A suspected **Russia-aligned nation-state actor** is using **Coruna** in **watering-hole attacks in Ukraine** and a **mass exploitation campaign**, expanding the kit’s abuse beyon...

CISA KEV remediation order for five exploited Apple, Craft CMS, and Laravel Livewire flaws

Advisory/Mitigation
First: 21.03.2026 10:25 Last: 21.03.2026 10:25 Sources 1

About this happening: **CISA** added **five exploited flaws** affecting **Apple**, **Craft CMS**, and **Laravel Livewire** to the **KEV catalog**, creating an urgent remediation requirement for federal...

Apple iOS outdated-device exploit-kit mitigation advisory

Advisory/Mitigation
First: 20.03.2026 07:16 Last: 20.03.2026 07:16 Sources 1

About this happening: **Apple** is sending **Lock Screen notifications** to **outdated iPhones and iPads** after detecting **active web-based attacks**, urging users to install updates. The latest noti...

Timeline

  1. 04.11.2025 10:10 2 articles · 6mo ago

    Initial report: Safari WebKit crash and memory corruption flaws (multiple vulnerabilities)

    Initial Disclosure

    Google's **Big Sleep** identified **five WebKit flaws** in **Safari** that Apple later tied to **crash** and **memory corruption** risk. The vulnerabilities were then addressed in Apple's **26.1** releases across multiple operating systems and Safari.

    Show sources