Apple Issues Urgent Update After Crypto Security Threat

Critical Image I/O Flaw Exploited via iMessage

Apple’s new security updates aim to address a critical zero-click vulnerability in Image I/O. The flaw enabled silent theft of crypto wallet credentials through malicious images sent via iMessage.

The Apple Security Engineering and Architecture team discovered and patched the vulnerability. Cryptocurrency users were highlighted as high-risk targets in their advisory due to this exploit.

Exploitation Targets Major Crypto Assets Globally

The vulnerability’s exploitation impacts all major self-custody crypto assets on affected devices, exposing users to significant losses. No mass-scale theft was reported; targeted attacks were the focus.

Financial and market implications are profound, as cryptocurrency users must act quickly to secure devices. Security expert Juliano Rizzo emphasized the threat’s sophistication and urged swift action.

– Juliano Rizzo, Founder & CEO, Coinspect, “This is a zero-click vulnerability that does not require user interaction, and an attachment delivered via iMessage can be processed automatically and lead to device compromise.” — Coinspect Advisory

Recent Apple Vulnerabilities and Crypto Risks

Past incidents like Pegasus and Hermit spyware have exploited Apple vulnerabilities, but few have targeted crypto wallets with this complexity. Apple patched seven zero-day vulnerabilities in 2025.

Experts recommend updating devices and rotating wallet credentials to protect assets, stressing the urgency as similar vulnerabilities may persist, posing ongoing risks to the cryptocurrency community.