Apple Rushes Emergency Patches for Crypto-Stealing Vulnerability

Cybercriminals have exploited a critical vulnerability in Apple's ImageIO framework, enabling them to execute malicious code through a simple doctored image—no user interaction required. The flaw, designated CVE-2025-43300, threatens iPhone, iPad, and Mac users, particularly those storing wallet keys or QR codes in photo galleries. Apple released urgent patches for iOS, macOS, and iPadOS on August 20, 2025, but the incident underscores growing risks to crypto security.

Malware leveraging this vulnerability can silently drain wallets by accessing recovery phrases or sensitive images. Security experts now advise migrating to cold wallets and restricting gallery permissions. The breach highlights how even trusted ecosystems like Apple’s can become attack vectors in the crypto space.