WhatsApp has issued an urgent warning to all iPhone users, urging them to update their app immediately following the discovery of a sophisticated zero-click vulnerability. The flaw, which does not require any user interaction to exploit, could allow hackers to access sensitive data on targeted devices.
The vulnerability, identified as CVE-2025-43300, affects Apple's operating system and was used in combination with a WhatsApp flaw to launch targeted attacks. WhatsApp confirmed in a security update that the exploit may have been used against specific individuals, though the number of affected users is believed to be small.
Adam Boynton, Senior Security Strategy Manager EMEIA at security firm Jamf, warned that the popularity of WhatsApp and Apple devices makes them prime targets for cybercriminals. "Attackers know that if they can find a way in, the payoff is huge," he said, noting that such exploits can lead to data theft, credential harvesting, or ransomware attacks.
Apple has already released a patch for the OS-level vulnerability, and WhatsApp has pushed an update to address the messaging app flaw. Users are advised to ensure both their iPhone operating system and WhatsApp app are up to date to remain protected.
To check for updates, iPhone users should open the App Store, tap their profile icon, and review the list of pending updates. Android users are also encouraged to enable automatic updates to receive security fixes promptly.
