The National Computer Emergency Response Team (NCERT) has issued a serious warning about a new cyber threat targeting Apple devices. The flaw, found in Apple’s ImageIO framework and identified as CVE-2025-43300, allows hackers to exploit a Dangerous Image File to gain control over iPhones, iPads, and Macs.
According to NCERT, this zero-day vulnerability is being actively used in targeted attacks. The Dangerous Image File vulnerability lets attackers overwrite memory when the device processes a malicious image. This can lead to full system compromise, data theft, and unauthorized access.
The attack can be triggered remotely. Cybercriminals trick users into opening a Dangerous Image File that has been carefully crafted to exploit the flaw. No special permissions are needed, making the threat particularly dangerous. Apple has released urgent security updates to fix the issue and protect users from potential attacks.
The vulnerability was first found in iOS 17.4 and affects several newer versions of Apple’s operating systems. NCERT has urged users to update immediately to iOS and iPadOS 18.6.2 or later. Mac users should upgrade to macOS Sequoia 15.6.1, Ventura 13.7.8, or Sonoma 14.7.8 to stay safe.
For users unable to update right away, NCERT advises avoiding image files from unknown sources and disabling automatic image rendering. It also recommends monitoring device logs for strange crashes or memory-related issues.
While no indicators of compromise (IoCs) have been released, NCERT has called on organizations to strengthen their cybersecurity measures. They should enable automatic updates, use mobile device management (MDM) tools for patch enforcement, and improve endpoint monitoring.
The agency warned that timely action is critical. Users must install Apple’s latest patches without delay to prevent possible attacks linked to this Dangerous Image File vulnerability and ensure their personal and organizational data remains secure.
In other news read more about: Disable AirPlay Now: 1.8 Billion iPhones at Risk from ‘Airborne’ Hacking Threat
