iPhone users urged to update immediately to fix critical vulnerability exploited by hackers

Apple have warned iPhone users to update to the latest iOS after a major vulnerability was found.

Apple released its update for iPhones, iOS 18.6, and pretty soon, there was an issue at large.

Bleeping Computer reported that a bug was noted and tracked under the name CVE-2025-6558, which allowed attackers to target Google Chrome and Apple users by creating malicious HTML pages, which could then allow them to run arbitrary code on the victim's computer or even other devices.

The same bug also affects Apple software, causing the company to scramble to create a fix which they have just released and bundled it with the iOS 18.6 release.

According to the company, the bug on the previous iOS 18.6 could let malicious hackers create a web page that would crash Safari, rendering users unable to use the tool.

Apple users have been urged to update as soon as possible (Tim Robberts / Getty)

The hacker’s bug has been added to America's Cybersecurity & Infrastructure Security Agency (CISA)'s vulnerability catalog, call it actively exploited.

Now that Apple has created a fix, security experts are urging everyone to install it immediately.

The update comes with a package of 29 security fixes, including some that patch serious holes that could otherwise leave your data vulnerable to cyber attacks.

While Apple hasn’t passed down the finer details to the public, being secretive may just give hackers as little time as possible to exploit the flaws.

So, if you don’t want your data to be compromised or your Safari to go bust, it’s the update you need to instal fast.

According to Apple’s support page, many of the issues relate to WebKit, the engine that powers Safari.

CVE-2025-4322 has the potential to allow sensitive information to leak if a user visits a malicious website.

Or, there’s a chance that other bugs could cause memory corruption, which is also triggered by iffy web content.

Not only that, but iOS 18.6 fixes a weakness in CoreMedia Playback.

iOS 18.6 contained 23 vulnerabilities, making Safari vulnerable (NurPhoto / Contributor)

This weakness could let an app gain access to sensitive user data, which isn’t something you’d want to happen.

Daniel Card, an independent cybersecurity consultant, said there’s one specific problem that’s been addressed by Apple within the fresh update bundle.

Wright says: “Overall, there is no reason to panic, but I would highly recommend that users update to iOS 18.6 as soon as possible to be on the safe side”.

Card also suggested that users make sure they have enough space in iCloud before downloading.

He said: “Some people have their iCloud full, so not only do their device back-ups not work, their updates fail”.

For those of you with an iPhone XS or later, find the iOS 18.6 by visiting your Settings > General > Software Update.

While you’re at it, you might want to disable Apple’s AirPlay system after cybersecurity firm Oligo Security revealed 23 separate vulnerabilities in it that could let hackers remotely take control of your device, all without touching it.

AirPlay has now been branded a potential security threat as hackers use "AirBorne” methods to compromise your data.