{"id":114553,"date":"2025-11-04T08:26:12","date_gmt":"2025-11-04T08:26:12","guid":{"rendered":"https:\/\/www.newsbeep.com\/il\/114553\/"},"modified":"2025-11-04T08:26:12","modified_gmt":"2025-11-04T08:26:12","slug":"googles-ai-big-sleep-finds-5-new-vulnerabilities-in-apples-safari-webkit","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/il\/114553\/","title":{"rendered":"Google’s AI ‘Big Sleep’ Finds 5 New Vulnerabilities in Apple’s Safari WebKit"},"content":{"rendered":"

\ue802Nov 04, 2025\ue804Ravie LakshmananArtificial Intelligence \/ Vulnerability<\/p>\n

\"\"<\/a><\/p>\n

Google’s artificial intelligence (AI)-powered cybersecurity agent called Big Sleep has been credited by Apple for discovering as many as five different security flaws in the WebKit component used in its Safari web browser that, if successfully exploited, could result in a browser crash or memory corruption.<\/p>\n

The list of vulnerabilities is as follows –<\/p>\n

CVE-2025-43429 – A buffer overflow vulnerability that may lead to an unexpected process crash when processing maliciously crafted web content (addressed through improved bounds checking)
\nCVE-2025-43430 – An unspecified vulnerability that could result in an unexpected process crash when processing maliciously crafted web content (addressed through improved state management)
\nCVE-2025-43431 & CVE-2025-43433 – Two unspecified vulnerabilities that may lead to memory corruption when processing maliciously crafted web content (addressed through improved memory handling)
\nCVE-2025-43434 – A use-after-free vulnerability that may lead to an unexpected Safari crash when processing maliciously crafted web content (addressed through improved state management)<\/p>\n

\"DFIR<\/a><\/p>\n

Patches for the shortcomings have been released by Apple on Monday as part of iOS 26.1, iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, watchOS 26.1, visionOS 26.1, and Safari 26.1. The updates are available for the following devices and operating systems –<\/p>\n

iOS 26.1 and iPadOS 26.1<\/a> – iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later
\nmacOS Tahoe 26.1<\/a> – Macs running macOS Tahoe
\ntvOS 26.1<\/a> – Apple TV 4K (2nd generation and later)
\nvisionOS 26.1<\/a> – Apple Vision Pro (all models)
\nwatchOS 26.1<\/a> – Apple Watch Series 6 and later
\nSafari 26.1<\/a> – Macs running macOS Sonoma and macOS Sequoia<\/p>\n

Big Sleep, formerly called Project Naptime, is an AI agent launched<\/a> by Google last year as part of a collaboration between DeepMind and Google Project Zero to enable automated vulnerability discovery.<\/p>\n

Earlier this year, Google said<\/a> the large language model (LLM)-assisted framework identified a security flaw in SQLite (CVE-2025-6965, CVSS score: 7.2) that it said was at “risk of being exploited” by malicious actors.<\/p>\n

While none of the vulnerabilities listed in Monday’s security bulletins have been flagged as exploited in the wild, it’s always a good practice to keep devices updated to the latest version for optimal protection.<\/p>\n","protected":false},"excerpt":{"rendered":"\ue802Nov 04, 2025\ue804Ravie LakshmananArtificial Intelligence \/ Vulnerability Google’s artificial intelligence (AI)-powered cybersecurity agent called Big Sleep has been…\n","protected":false},"author":2,"featured_media":114554,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[8788,17239,17232,17231,17233,17234,17235,2843,17236,17237,17241,85,11257,46,17242,17240,17238,125,17243],"class_list":["post-114553","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","tag-computer-security","tag-cyber-attacks","tag-cyber-news","tag-cyber-security-news","tag-cyber-security-news-today","tag-cyber-security-updates","tag-cyber-updates","tag-data-breach","tag-hacker-news","tag-hacking-news","tag-how-to-hack","tag-il","tag-information-security","tag-israel","tag-network-security","tag-ransomware-malware","tag-software-vulnerability","tag-technology","tag-the-hacker-news"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts\/114553","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/comments?post=114553"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts\/114553\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/media\/114554"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/media?parent=114553"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/categories?post=114553"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/tags?post=114553"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}