All iPhone users are being urgently urged to update their WhatsApp app after security researchers uncovered and patched a serious zero-click vulnerability (CVE-2025-55177).
The flaw affected WhatsApp for iOS and macOS versions prior to 2.25.21.73 and 2.25.21.78, allowing attackers to compromise devices without any interaction from the victim.
What Happened?
The vulnerability was linked to incomplete authorization of linked device synchronization messages, which hackers combined with a second flaw; Apple’s CVE-2025-43300 in the Image I/O framework.
By sending a maliciously crafted image, attackers could trigger memory corruption, enabling powerful chained spyware attacks.
This is especially dangerous because it was a “zero-click” attack: victims didn’t need to open a chat or click a file for their phone to be hacked.
How to Pre-Order Samsung Galaxy Z Fold7 in Dubai at Lowest Price?
Who Was Affected?
- WhatsApp has notified fewer than 200 individuals worldwide who may have been targeted.
- High-risk groups such as journalists, human rights defenders, and civil society activists are believed to have been the primary focus.
Meta Teen Accounts: UAE Gets Early Access to New Safety Features
What Users Should Do Now
- Update WhatsApp immediately on iOS, macOS, and Android to the latest version.
- Turn on Lockdown Mode (iOS) or Advanced Protection (Android) for extra security.
- If WhatsApp notified you of a possible compromise, perform a full factory reset on your device.
- Keep your iPhone or Mac operating system updated at all times.
Emirates ID Perks You’re Probably Wasting (And How to Use Them Right!)
Why It Matters
This WhatsApp vulnerability shows how sophisticated spyware campaigns are evolving, using zero-click exploits that leave no trace and require no user action. Even though the attack was highly targeted, the best defense for all users is to update their apps and systems immediately.
