CVE-2025-43564(adobe / coldfusion)

Researchers observed a CoreGraphics zero-day (CVE-2025-43564) exploited in highly targeted attacks against older iOS devices — arbitrary code execution triggered by processing a maliciously crafted file. Post-compromise, attackers established covert C2 channels and accessed credentials and OAuth tokens stored on device, enabling pivots into connected enterprise systems. Runtime segmentation and Zero Trust controls at the cloud boundary can help restrict lateral movement originating from compromised mobile endpoints. #ZeroTrust #MobileSecurity 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/apple-backports-coregraphics-zero-day-cve-2026-86950-older-iphones