WhatsApp fixes ‘zero-click’ bug used to hack Apple users with spyware

WhatsApp patched a critical security vulnerability (CVE-2025-55177) that was exploited alongside an iOS/Mac flaw to deliver zero-click spyware attacks targeting specific users. The sophisticated campaign affected fewer than 200 users over 90 days, allowing attackers to compromise devices and steal data without any user interaction. This follows previous spyware incidents involving WhatsApp, including the NSO Group case that resulted in $167 million in damages.