Apple has issued iOS 16.6 fixing 25 iPhone security flaws, two of which are already being used in real-life attacks.