Malwaremedium

CISA: Spyware and RATs used to target WhatsApp and Signal Users

Security Affairsby @securityaffairsNov 25, 2025 · 10:39 UTC (Nov 25, 2025)1 min read9 · 6 reads

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-43300 CVE-2025-55177 CVE-2025-21042

Tags: cve-2025-43300 cve-2025-55177 cve-2025-21042 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-21042	Out-of-Bounds Write RCE in Samsung Mobile Image Codec (libimagecodec.quram.so)	9.8	36%	KEV	Sep 12, 2025 KEV Nov 10, 2025
CVE-2025-43300	Actively Exploited Out-of-Bounds Write in Apple iOS/iPadOS/macOS Image I/O	10.0	65%	KEVPoC	Aug 21, 2025 KEV Aug 21, 2025
CVE-2025-55177	Incorrect Authorization in WhatsApp Linked-Device Sync Used in Targeted Spyware Attacks	5.4	14%	KEV	Aug 29, 2025 KEV Sep 2, 2025

From the original article

1 min read at securityaffairs.com

CISA warns that threat actors are actively using commercial spyware and RATs to target users of mobile messaging apps WhatsApp and Signal. The U. S.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.