Emergency fixes deployed by Google and Apple after targeted attacks

According to Apple, the company issued emergency security updates for iPhones, iPads, Macs and other devices, patching two WebKit bugs tracked as CVE-2025-14174 and CVE-2025-43529 that are likely exploited in targeted, sophisticated attacks on iOS systems prior to version 26. The campaigns are described as involving nation-state actors and commercial spyware vendors, with a focus on specific high‑value individuals rather than broad mass exploitation.

Google also patched several Chrome bugs, including one actively exploited in the wild, and researchers from both companies jointly identified the flaw. Initially, technical details were not shared, but the joint attribution suggests the vulnerability was part of a broader espionage operation rather than opportunistic cybercrime.

The updates were released as part of emergency fixes after targeted attacks, with Apple noting the advisory signifying possible exploitation against specific individuals on older iOS versions. December 13, 2025.