Major Security Breach in Apple Devices: Alert For Users to Update Immediately
Babushahi Bureau
Chandigarh, August 22, 2025 – A major security loophole has been discovered in Apple devices, allowing hackers to break into iPhones, iPads, and Macs simply by sending a malicious image file. The warning was highlighted by KS Sidhu, former Special Chief Secretary of Punjab, who has urged all Apple users to update their devices without delay.
Apple confirmed that the flaw—officially identified as CVE-2025-43300—was being actively exploited in targeted attacks. The vulnerability lies in ImageIO, the software component that processes images across apps like iMessage, Mail, Safari, and social media platforms. Hackers were able to insert malicious code in images, making this a rare “zero-click” exploit—users did not need to click, download, or even open a file for their device to be compromised.
Also Read: Major Security Breach in Apple Devices— Are YOU affected by KBS Sidhu
https://kbssidhu.substack.com/
“This is one of those ‘drop everything and update’ moments,” Sidhu said, emphasizing the urgent need for users to protect their devices against potential breaches.
Apple released emergency security patches on August 20, 2025, covering iPhones, iPads, and Macs. The company stated that while only a small number of high-profile individuals such as journalists and activists were initially targeted, the flaw could be replicated by cybercriminals if updates are not applied promptly.
Versions to update:
-
iPhone/iPad: iOS 18.6.2, iPadOS 18.6.2 or iPadOS 17.7.10
-
Mac: macOS Sequoia 15.6.1, macOS Sonoma 14.7.8, macOS Ventura 13.7.8
Users can install the patch via Settings → General → Software Update on iPhones/iPads, or System Settings → General → Software Update on Macs.
Security experts note that while Apple acted swiftly, the incident highlights growing risks of zero-click attacks, which bypass user interaction completely. In past years, similar exploits such as FORCEDENTRY (2021) and BLASTPASS (2023) were linked to spyware campaigns targeting high-value individuals.
Sidhu further stressed that even ordinary users should not ignore the update. “Our phones today carry our bank, our identity, our work, and our memories. Keeping them safe is essential.”