CISA Warns of Apple WebKit Vulnerability 0-Day Vulnerability Exploited in Attacks

CISA has issued an urgent warning about a critical, actively exploited WebKit use-after-free zero-day (CVE-2025-43529) affecting iOS, iPadOS, macOS, Safari and other WebKit-based apps; organizations and users are urged to apply Apple security updates immediately, inventory WebKit-using systems, and implement mitigations (restricted browsing, network filtering) with a federal compliance deadline of January 5, 2026.