![\"Man](\"https:\/\/www.newsbeep.com\/ie\/wp-content\/uploads\/2025\/12\/1765604948_998_0x0.jpg\")
<\/p>\n<\/p>\n
Update your phone now.<\/p>\n
Getty<\/p>\n
We live in interesting times. Mercenary, commercial spyware is being developed faster than exploits can be patched. Both Apple and Google have warned that this is a game-changer for their smartphones. Both have issued warnings directly to targeted users. And both have now issued emergency updates for their billions of users.<\/p>\n
Google kicked off Dangerous December with a warning<\/a> that Android is under attack<\/a>, with two critical vulnerabilities \u201cunder limited, targeted exploitation.\u201d Then Google issued another emergency update<\/a> for all Chrome<\/a> users. So quickly was this fix rushed out to 3 billion users, it didn\u2019t even have a CVE classification at the time.<\/p>\n ForbesSamsung Surprises Millions Of Users With Emergency Android UpdateBy Zak Doffman<\/a><\/p>\n But now it does. \u201cGoogle is aware that an exploit for CVE-2025-14174 exists in the wild.\u201d And that\u2019s where it gets interesting. Because Apple has just issued an emergency update for all iPhone and iPad users as well. Two vulnerabilities. One of which is also CVE-2025-14174, discovered by \u201cApple and Google Threat Analysis Group.<\/p>\n The second Apple vulnerability is CVE-2025-43529, also attributed to Google\u2019s Threat Analysis Group. Both Apple\u2019s fixes affect the WebKit browser framework. Ali Mousavifar from Menlo Security explains that \u201cthe two active WebKit exploits in iOS 26.2 highlight a clear trend: browser engines are a primary target for attackers. Since WebKit powers every browser on an iPhone, this creates a wide exposure.\u201d<\/p>\n Put the pieces together and you have a wide exposure across all smartphones and the world\u2019s most popular browsers, Chrome, Safari and Microsoft Edge<\/a> \u2014 also exposed to CVE-2025-14174, which Microsoft says, \u201chas been reported by the Chromium team as having an exploit in the wild.\u201d There are no safe harbors.<\/p>\n America\u2019s cyber defense agency has already issued its own CVE-2025-14174 update mandate for federal staff. Update Chrome and all other Chromium browsers by Jan. 2 or \u201cdiscontinue use of the product.\u201d The vulnerability, CISA<\/a> says, could enable \u201ca remote attacker to perform out of bounds memory access via a crafted HTML page.\u201d<\/p>\n