Cybersecurity News in Asia

RECENT STORIES:

SEGA moves faster with flow-based network monitoring
Malvertising campaign targets Android users with advanced crypto-steal...
How are people in 15 countries leveraging AI for travel planning?
Insider threats cited alongside external attacks in terms of severity:...
How are people in 15 countries leveraging AI for travel planning?
North America financial institutions lead surge in financial regulator...
LOGIN REGISTER
CybersecAsia
  • Features
    • Featured

      Resilience the true benchmark for smart infrastructure

      Resilience the true benchmark for smart infrastructure

      Wednesday, August 27, 2025, 8:21 PM Asia/Singapore | Features, IoT Security
    • Featured

      Deepfake a crisis of trust, not just technology

      Deepfake a crisis of trust, not just technology

      Tuesday, August 19, 2025, 10:06 AM Asia/Singapore | Features
    • Featured

      When talking sense into AI power mongers fails, talk $$$: A message from AI

      When talking sense into AI power mongers fails, talk $$$: A message from AI

      Thursday, August 14, 2025, 12:26 PM Asia/Singapore | Features
  • Opinions
  • Tips
  • Whitepapers
  • Awards 2025
  • Directory
  • E-Learning

Select Page

News

Zero-click vulnerability in the Apple ecosystem still a lingering concern

By CybersecAsia editors | Tuesday, June 17, 2025, 1:59 PM Asia/Singapore

Zero-click vulnerability in the Apple ecosystem still a lingering concern

A Jan 2025 incident, addressed since Feb 2025, is still a concern now due to the non-transparent disclosure and other factors.

A critical security flaw, identified as CVE-2025-43200, in Apple’s Messages app, had been exploited to deploy Paragon’s Graphite spyware targeting journalists, according to a report by The Hacker News on 13 June, 2025.

The Citizen Lab, a research group focused on cyber surveillance, uncovered evidence of the flaw being used against Italian journalist Ciro Pellegrino and another prominent European journalist in January and February 2025, using devices running iOS 18.2.1.

The attacks, described as highly sophisticated, enabled covert surveillance by accessing messages, cameras, microphones, and location data without victims’ awareness. When exploited, the zero click vulnerability required no user interaction to gain control, and allowed attackers to compromise devices by processing maliciously crafted photos or videos shared via iCloud Links.

The response by Apple was to notify affected users and issue threat alerts, although the firm had initially delayed disclosing the flaw’s existence, raising questions about transparency. Eventually, this zero-click vulnerability was addressed with software patches* on 10 February 2025. Apple’s response included patching another zero-day flaw, CVE-2025-24200, in the same updates, addressing vulnerabilities exploited in targeted attacks.

While the incident had occurred in the early part of 2025, concerns linger over the spyware linked to Paragon, a commercial surveillance vendor, about mercenary spyware targeting civil society members such as journalists and activists.

The Citizen Lab has noted that the infections contacted a server associated with an unidentified Paragon operator, consistent with previous reports of Graphite spyware targeting Italian human rights activists. This incident underscores the growing threat of zero-click exploits, which bypass user interaction and traditional security measures.

Even now, in June 2025, users and potential victims of such zero click vulnerabilities are urged to update to the latest software versions and consider enabling Lockdown Mode to reduce exposure to such threats.

*with updates across multiple platforms, including iOS 18.3.1, iPadOS 18.3.1, macOS Sequoia 15.3.1, and others, to implement enhanced validation checks

Share:

Previous‘Want to avoid Swiss Cheese cybersecurity? Heed Hammurabi’s Code!
NextWill robocall fraud start to decline in 2026 with stronger regulations?

Related Posts

With great payment-methods growth come greater security liabilities

With great payment-methods growth come greater security liabilities

Tuesday, May 7, 2024

Babuk RaaS may have died, but it has not lost its Groove

Babuk RaaS may have died, but it has not lost its Groove

Tuesday, September 14, 2021

New crypto scams abuse legitimate blockchain protocols to steal crypto wallets

New crypto scams abuse legitimate blockchain protocols to steal crypto wallets

Monday, July 29, 2024

Staying safe at the year-end massive e-sales, starting with Prime Day

Staying safe at the year-end massive e-sales, starting with Prime Day

Tuesday, October 13, 2020

Leave a reply Cancel reply

You must be logged in to post a comment.

Voters-draw/RCA-Sponsors

Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
previous arrow
next arrow

CybersecAsia Voting Placement

Gamification listing or Participate Now

PARTICIPATE NOW

Vote Now -Placement(Google Ads)

Top-Sidebar-banner

Whitepapers

  • 2024 Insider Threat Report: Trends, Challenges, and Solutions

    2024 Insider Threat Report: Trends, Challenges, and Solutions

    Insider threats continue to be a major cybersecurity risk in 2024. Explore more insights on …Download Whitepaper
  • AI-Powered Cyber Ops: Redefining Cloud Security for 2025

    AI-Powered Cyber Ops: Redefining Cloud Security for 2025

    The future of cybersecurity is a perfect storm: AI-driven attacks, cloud expansion, and the convergence …Download Whitepaper
  • Data Management in the Age of Cloud and AI

    Data Management in the Age of Cloud and AI

    In today’s Asia Pacific business environment, organizations are leaning on hybrid multi-cloud infrastructures and advanced …Download Whitepaper
  • Mitigating Ransomware Risks with GRC Automation

    Mitigating Ransomware Risks with GRC Automation

    In today’s landscape, ransomware attacks pose significant threats to organizations of all sizes, with increasing …Download Whitepaper

Middle-sidebar-banner

Case Studies

  • CISOs can navigate emerging risks from autonomous AI with a new security framework

    CISOs can navigate emerging risks from autonomous AI with a new security framework

    See how security leaders can adopt layered strategies addressing intent, governance, and oversight to manage …Read more
  • MoneyMe strengthens fraud prevention and credit decisioning

    MoneyMe strengthens fraud prevention and credit decisioning

    Australian fintech strengthens risk management with SEON to scale lending operations securely and efficiently.Read more
  • PT Kereta Api Indonesia announces nationwide email and communication overhaul

    PT Kereta Api Indonesia announces nationwide email and communication overhaul

    The state railway operator’s upgraded email system improves privacy, operational reliability, and regulatory alignment for …Read more
  • Operationalizing sustainability in cybersecurity: Group-IB’s approach

    Operationalizing sustainability in cybersecurity: Group-IB’s approach

    See how the firm turned malware-group takedowns into measurements of sustainability and resilience gains: by …Read more

Bottom sidebar

  • Our Brands
  • DigiconAsia
  • MartechAsia
  • Home
  • About Us
  • Contact Us
  • Sitemap
  • Privacy & Cookies
  • Terms of Use
  • Advertising & Reprint Policy
  • Media Kit
  • Subscribe
  • Manage Subscriptions
  • Newsletter

Copyright © 2025 CybersecAsia All Rights Reserved.