WhatsApp urges all iPhone users to download ‘critical’ update to avoid cyber attack

WhatsApp has released a new update for iPhone users that fixes a bug that could be exploited by cyber criminals, with a security expert now issuing a warning to all iPhone users

Following reports last month that Apple had rolled out iOS 18.6. 2 to address a serious software glitch, it’s now been confirmed that the dangers were directly linked to the widely-used messaging platform WhatsApp.

The Meta-owned chat application has now issued its own update to resolve the bug that impacted iPhones, iPads and Macs.

WhatsApp has released a complimentary update for iPhone users that tackles a flaw connected to anyone utilising WhatsApp group chats. The vulnerability in the service is known as a “zero-click” exploit, meaning it doesn’t need any direct user interaction, such as tapping a suspicious link, for sensitive device and app information to be compromised.

“We assess that this vulnerability, in combination with an OS-level vulnerability on Apple platforms (CVE-2025-43300), may have been exploited in a sophisticated attack against specific targeted users”, WhatsApp said.

A cybersecurity specialist is now advising all iPhone owners with WhatsApp installed to upgrade the app to the most recent version to prevent the possibility of being targeted by online criminals, reports the Express.

“WhatsApp and Apple devices are some of the most widely used technologies on the planet, especially among senior executives,” said Adam Boynton, Senior Security Strategy Manager EMEIA at security firm Jamf.

“That popularity makes them prime targets. Attackers know that if they can find a way in, the payoff is huge. It is why we see significant investment from adversaries in uncovering zero-click vulnerabilities like this one.”

The Hacker News revealed that WhatsApp had confirmed fewer than 200 WhatsApp users had been alerted that they may have been targeted by criminals in connection with the app vulnerability.

Whilst cases of the bug being exploited to infiltrate people’s iPhones seem extremely rare, Boynton recommends always maintaining your WhatsApp app with the most recent version from Meta.

“The objective is rarely just the initial compromise. Exploits of this kind are often a launchpad for extracting sensitive data, harvesting credentials, eavesdropping on conversations, or even staging a ransomware attack further down the line.

“This is why patching apps and keeping operating systems up to date is so critical. Apple does an excellent job of making security updates widely available and easy to apply, but organisations must ensure those updates are adopted quickly and consistently.”

WhatsApp continues to be an enormously popular messaging platform in the UK, boasting millions of users. It has, by all accounts, supplanted conventional SMS text messaging as the preferred smartphone chat application.

While this specific bug only impacts Apple devices, if you’re using WhatsApp on an Android handset you should still make certain you have automatic updates switched on so that vital fixes are regularly downloaded to your device.

“The lesson here is clear: do not underestimate the risk because a platform is popular and trusted. For attackers, that popularity is exactly what makes it worth targeting.”