Google and Apple Rush Emergency Security Updates After Targeted Zero-Day Attacks

Google and Apple Rush Emergency Security Updates After Targeted Zero-Day Attacks

Google and Apple have released emergency security patches after discovering zero-day vulnerabilities actively exploited in highly targeted cyberattacks. The attacks affected an unknown number of users and are believed to be linked to nation-state actors and commercial spyware vendors, rather than large-scale cybercrime.

Zero-Day Flaws Used in Sophisticated Espionage Campaigns

The newly patched vulnerabilities were already being used in the wild, prompting both companies to act quickly. Security researchers believe the campaign focused on specific high-value individuals, suggesting espionage-driven targeting rather than mass exploitation.

Google confirmed that one of the flaws impacted Google Chrome and was actively abused before a fix was available. The company initially withheld technical details while the investigation was ongoing.

Google Chrome Vulnerability Flagged by Security Researchers

Google later revealed that the zero-day bug was identified jointly by Apple’s security team and Google’s Threat Analysis Group (TAG). TAG specializes in tracking state-sponsored hacking groups and commercial surveillance tools, further reinforcing concerns that the flaw was used in targeted attacks.

Following the discovery, Google pushed out emergency updates to secure Chrome users across supported platforms.

Apple Patches WebKit Flaws Across Its Ecosystem

Apple also issued urgent updates for iPhones, iPads, Macs, and other devices, fixing two WebKit vulnerabilities tracked as CVE-2025-14174 and CVE-2025-43529. According to Apple, the flaws were likely exploited in highly sophisticated attacks against specific individuals running versions of iOS prior to iOS 26.

In its advisory, Apple stated that it was aware of reports indicating the vulnerabilities “may have been exploited in an extremely sophisticated attack against targeted individuals.”

Limited Details, Clear Urgency

Neither Apple nor Google shared further technical details about the attacks, likely to prevent copycat exploitation while investigations continue. However, the rapid release of patches highlights the severity of the threat.

What Users Should Do Now

Users are strongly advised to update their devices immediately. Applying the latest security updates is currently the most effective way to protect against these zero-day exploits.

These incidents once again underscore the growing risks posed by advanced surveillance tools and state-backed cyber operations, even against fully updated consumer devices.