Apple Zero-Days Under 'Sophisticated Attack,' but Details Lacking

Apple disclosed two zero-day vulnerabilities affecting iOS, iPadOS, macOS, tvOS, and visionOS — a CoreAudio memory-corruption bug (CVE-2025-31200) enabling remote code execution and an RPAC hardware flaw (CVE-2025-31201) that can bypass pointer authentication — both reported as exploited in the wild. The advisory provided minimal technical or attribution details; discovery was credited to Apple and Google TAG, and security researchers warn the lack of transparency hampers detection and mitigation of what may be targeted, sophisticated (potentially nation-state) attacks.