CrozTech

Get ready for some big updates

These are the new features coming to your iPhone next week with iOS 26.4 🚨

https://www.malwarebytes.com/blog/news/2026/01/fake-extension-crashes-browsers-to-trick-users-into-infecting-themselves?utm_source=iterable&utm_medium=email&utm_campaign=b2c_pro_oth_20260126_januaryweeklynewsletter_v4_1_176915651850&utm_content=crashfix

Fake extension crashes browsers to trick users into infecting themselves A fake ad blocker crashes your browser, then uses ClickFix tricks to make you run the malware yourself.

And That's How You Stay Secure LOL

It appears that Apple users are being affected by the same WebKit bug that affected Chrome users last week The iPhone maker has issued an emergency security update to protect users against two zero-day flaws that are being actively exploited by hackers. The attacks, which have been referred to as ‘sophisticated’ in an Apple support document, are targeting specific individuals; in this case, those still running older versions of iOS instead of iOS 26.

Both flaws affect WebKit and these new fixes were issued in response to the same reported exploitation. The first vulnerability (tracked as CVE-2025-43529) is a use-after-free remote code ex*****on flaw. It’s exploited by processing maliciously crafted web content and was discovered by Google’s Threat Analysis Group. The second vulnerability (tracked as CVE-2025-14174) is a memory corruption flaw that was discovered by both Google’s Threat Analysis Group and Apple.

These bugs appear to be somewhat related to the zero-day flaw that Google just patched last week. It was tracked as 466192044 and didn’t initially have a CVE (Common Vulnerabilities and Exposures) umber but was considered to be a high severity flaw. That bug is now referred to as CVE-2025-14174 which is an out of bounds memory access in ANGLE – and is the same CVE number as above.

Link in the comments for the full story ⬇️