Phishing & fraudcritical
Week in review: Apple 0-day used to target iPhones, DeepSeek’s popularity exploited by scammers
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-40891 | Post-Authentication OS Command Injection in Zyxel DSL CPE Devices | 8.8 | 23% | KEV | KEV |
| CVE-2024-53704 | Authentication Bypass in SonicWall SonicOS SSLVPN | 9.8 | 95% | KEVRansomware | KEV |
| CVE-2025-24085 | Use-After-Free Privilege Escalation in Apple iOS, iPadOS, macOS and Other Platforms | 10.0 | 18% | KEV | KEV |
From the original article
4 min read at helpnetsecurity.com
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Apple zero-day vulnerability exploited to target iPhone users (CVE-2025-24085) Apple has shipped a fix for a zero-day vulnerability (CVE-2025-24085) that is being leveraged by attackers against iPhone users.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.