Apple patches security flaw exploited in Chrome zero-day attacks
Tracked as CVE-2025-6558, the security bug is due to the incorrect validation of untrusted input in the ANGLE (Almost Native Graphics Layer Engine) open-source graphics abstraction layer, which processes GPU commands and translates OpenGL ES API calls to Direct3D, Metal, Vulkan, and OpenGL.
Vlad Stolyarov and Clément Lecigne of Google's Threat Analysis Group (TAG), a team of security experts dedicated to defending Google customers against state-sponsored attacks, discovered CVE-2025-6558 in June and reported it to the Google Chrome team, who patched it on July 15 and tagged it as actively exploited in attacks.
While Google has yet to provide further information on these attacks, Google TAG frequently discovers zero-day flaws exploited by government-sponsored threat actors in targeted campaigns aimed at deploying spyware on devices of high-risk individuals, including dissidents, opposition politicians, and journalists.
Apple patches security flaw exploited in Chrome zero-day attacks
Security is like insurance—until you need it, you don’t think about it.
But when something goes wrong? Break-ins, theft, liability claims—suddenly, it’s all you think about.
ArcadianAI upgrades your security to the AI era—no new hardware, no sky-high costs, just smart protection that works.
→ Stop security incidents before they happen
→ Cut security costs without cutting corners
→ Run your business without the worry
Because the best security isn’t reactive—it’s proactive.
