If you haven’t updated your Apple device yet, now’s the time—Apple has just patched a critical zero-day vulnerability that’s already being exploited.

What’s Going On?

On August 21, 2025, Apple dropped emergency security updates across iPhones, iPads, and Macs. These updates fix a dangerous zero-day flaw—tracked as CVE-2025-43300—in the Image I/O (ImageIO) framework, which handles image reading and writing on Apple devices. Malwarebytes.com

The vulnerability is an out-of-bounds write, meaning a maliciously crafted image can corrupt your device’s memory, crash apps, or even give attackers full control. IT Pro

Worse yet, Apple is aware this flaw has already been exploited in the wild during highly sophisticated targeted attacks. Secpod.com

---

What You Need to Update

Make sure your device is running one of the following patched versions:

• iOS 18.6.2
• iPadOS 18.6.2 (or 17.7.10 for older iPads)
• macOS Sequoia 15.6.1
• macOS Sonoma 14.7.8
• macOS Ventura 13.7.8    

These updates improve bounds checking within the Image I/O framework, closing the exploit hole. 

Why You Must Act Now

• Exploitation Is Already Happening: Apple confirmed active use in targeted intrusions.    
• Fast Risk Escalation: Cyber threats that start targeted often become widespread quickly. Malwarebytes warns ordinary users are at rising risk once a patch is out. 
• You Could Be Vulnerable: Even casual browsing of images—via email, messaging apps, or the web—may trigger this exploit.  

---

---

How to Update

iPhone & iPad

1. Navigate to Settings > General > Software Update
2. Look for and install the latest update (iOS 18.6.2 or iPadOS 18.6.2 / 17.7.10)
3. Turn on Automatic Updates to stay future-proof

Mac

1. Open the Apple menu > System Settings > General > Software Update
2. Install the latest available update (Sequoia 15.6.1, Sonoma 14.7.8, or Ventura 13.7.8)
3. Save your work—updates may require restarts and can take time

Final Word

As reported by Malwarebytes.com, Apple has patched a zero-day that—while used in high-value targeted attacks—could easily become a broader threat if left unaddressed. 

If you haven’t gotten to those updates yet—this is your reminder. For safety’s sake, go ahead and update right now.

Stay secure—update today.