Apple Releases Emergency Security Updates to Patch Two Zero-Day Flaws

What You Need to Know About These Newly Discovered Vulnerabilities

Apple has just released a series of emergency security updates to fix two zero-day flaws that were discovered by security researchers from both Apple and Google’s Threat Analysis Group. • iPhone (XS and later)
• iPad Pro 13-inch, iPad Pro 13.9 inch (3rd gen and later)
• iPad Pro 11-inch (1st gen and later)
• iPad Air (3rd gen and later)
• iPad (7th gen and later)
• iPad mini (5th gen and later)
• Macs running macOS Sequoia
• Apple TV HD
• Apple TV 4K (all models)
• Apple Vision Pro

Two Zero-Day Flaws Discovered by Apple and Google

These recently discovered vulnerabilities were quickly patched by the company after it became aware that they may have been exploited in an “extremely sophisticated attack”. The first zero-day (CVE-2025-31200) is a flaw in CoreAudio that was discovered by security researchers from both Apple and Google’s Threat Analysis Group. If exploited by hackers, it can be used to execute remote code on a vulnerable device by processing an audio stream in a maliciously crafted media file. • The second zero-day (CVE-2025-31201) is a flaw in Apple’s Remote Participant Audio Control (RPAC) framework that the company discovered on its own. Hackers with read and write access to a vulnerable device can exploit this vulnerability to bypass an iOS security feature called Pointer Authentication which helps protect against memory corruption attacks.

How to Keep Your iPhone and Mac Safe from Hackers

Hackers love to go after people running outdated software as they’re easy targets. To minimize your risk of falling victim to an attack leveraging security flaws or vulnerabilities that have already been patched, you want to install the latest iPhone, Mac, and other security updates from Apple as soon as they become available. From here, you want to make sure that you and the rest of your household are practicing good cyber hygiene. This means not clicking on links or downloading attachments from unknown senders as well as not responding to suspicious emails that come with a sense of urgency. All of the examples above are tell-tale signs of a phishing scam which could put your personal and financial data at risk and could potentially lead to you falling victim to identity theft. While your Mac comes with Apple’s own XProtect security software pre-installed, you may also want to consider using the best Mac antivirus software alongside it for extra protection. Although there isn’t an iPhone equivalent to the best Android antivirus apps due to Apple’s own restrictions around malware scanning, Intego’s Mac antivirus software can scan your iPhone or iPad for malware when connected to your computer via a USB cable.

Additional Tips for Staying Safe

In addition to installing the latest security updates, here are some extra tips to keep you safe from hackers:

Be cautious when using public Wi-Fi networks, as they can be vulnerable to man-in-the-middle attacks.
Use strong, unique passwords for all of your accounts, and make sure to update them regularly.
Keep your devices and software up to date, and avoid using pirated or cracked software.
Be wary of suspicious emails or links, and never download attachments from unknown senders.
Use two-factor authentication whenever possible.

What You Need to Do Now

To keep your iPhone and Mac safe from hackers, you need to take immediate action. This includes:

Installing the latest security updates as soon as possible.
Updating your operating system and apps to the latest versions.
Using antivirus software to scan for malware and other security threats.
Practicing good cyber hygiene by being cautious when using public Wi-Fi networks, using strong passwords, and avoiding suspicious emails and links.

Conclusion

The release of these emergency security updates is a reminder that Apple is constantly working to protect its users from cyber threats. While it may seem scary to deal with zero-day flaws and security vulnerabilities, it’s actually a good thing that the company is proactively addressing these issues. By taking the necessary steps to protect yourself and your devices, you can minimize the risk of falling victim to a cyberattack.