Apple Addresses WebKit Zero-Day Exploited in Sophisticated Attacks

Apple has released a fix for a zero-day vulnerability, CVE-2025-24201, affecting the WebKit browser engine. This flaw has been actively exploited in highly sophisticated attacks, allowing threat actors to escape the Web Content sandbox using maliciously crafted web pages. The update serves as a supplementary patch to reinforce protections against an attack that was initially mitigated in iOS 17.2.