Apple Patches More Zero-Days Used in 'Sophisticated' Attack

Apple patched two WebKit zero-day vulnerabilities (CVE-2025-43529 and CVE-2025-14174), the latter of which was also linked to a Chrome/ANGLE fix coordinated with Google. Both flaws are memory-corruption issues that could enable arbitrary code execution; Apple and Google kept technical details minimal and Apple warned the bugs may have been exploited in an "extremely sophisticated" attack against targeted individuals, prompting vendor coordination and expert commentary about the high-risk nature of shared graphics-component exploits.