APPLE PATCHES SECURITY FLAW EXPLOITED IN CHROME ZERO-DAY ATTACKS

Summary from the TLDR InfoSec newsletter

Apple patched CVE-2025-6558, a high-severity vulnerability in the ANGLE graphics layer that was actively exploited in Chrome zero-day attacks and allows remote code execution via malicious HTML pages. Google's Threat Analysis Group discovered the flaw in June, with Google patching Chrome on July 15 and CISA adding it to the Known Exploited Vulnerabilities catalog, requiring federal agencies to patch by August 12. The vulnerability affects iOS 18.6, iPadOS 18.6, macOS Sequoia 15.6, and other Apple platforms, marking the sixth zero-day Apple has patched this year.