Apple issues iOS 18.7.11 and iPadOS 18.7.11 to patch an exploited CoreGraphics vulnerability on legacy hardware.

On October 26, 2026, Apple issued patches for 304 vulnerabilities affecting multiple operating systems and applications. Notably, CVE-2026-86950, a CoreGraphics vulnerability previously exploited and patched a month earlier, now has corresp

Apple has implemented automatic device updates across macOS to block compromised eMudhra intermediate certificates with weak cryptographic keys.

P7 DarkSword is a new variant of the DarkSword iOS exploit kit, designed to steal cryptocurrency wallet data, iCloud Keychain information, photos, files, and other sensitive data from vulnerable iPhones. In this episode, we explore its stealth techniques, remote command capabilities, malicious websites used for distribution, and the essential security measures every iPhone user should know.

CloudSyncD Malware: Fake Zoom Installer Threatens macOS A Deceptive New Threat Recently, security firm Jamf Threat Labs published an insightful report detailing a novel macOS malware named CloudSyncD. This malicious trojan cleverly disguises itself as a standard Zoom conferencing software installer. It deceptively utilizes fabricated installation instructions to manipulate unsuspecting users. Consequently, victims willingly disable the built-in macOS Gatekeeper security mechanism.

Apple Addresses Active CoreGraphics Exploit Apple recently deployed a highly targeted security update, specifically releasing iOS 26.7.1 to address a severe vulnerability. Malicious actors may have already exploited this flaw to compromise targeted iPhone users. The critical issue, officially tracked as CVE-2026-86950, directly affects the CoreGraphics framework. Consequently, it allows attackers to execute arbitrary code simply by processing a maliciously crafted file.

TL;DR Researcher Peter Malone has published full details and proof-of-concept code for CVE-2026-84543, a macOS SMB kernel vulnerability. A malicious SMB server can crash a Mac's kernel when the Mac mounts one of its shares. Apple fixed the flaw on September 14, 2026, and paid a $20,000 bounty. Why This macOS SMB Kernel Vulnerability Matters SMB is the standard protocol Macs use to reach network file shares.

Apple has urgently deployed the iOS 26.7.1 and iPadOS 26.7.1 software updates. Crucially, this release introduces no new functional features; rather, it exists solely to eradicate a highly critical security vulnerability. Apple has officially acknowledged receiving credible intelligence indicating that this specific flaw may have been actively weaponized in exceptionally sophisticated, highly targeted cyberattacks. The corporation has successfully neutralized this profound threat by implementing substantially enhanced boundary-checking protocols within the operating system.

Apple has released security updates to address a vulnerability in older versions of iOS, iPadOS, and macOS that it said may have been exploited in targeted attacks. The vulnerability, tracked as CVE-2026-86950, refers to an out-of-bounds write impacting the CoreGraphics component that could lead to arbitrary code execution when processing a maliciously crafted file. The iPhone maker said the

TL;DR Security researcher Ilya Andr from PT MAZE recently uncovered a critical flaw in macOS. The macOS DesktopServicesHelper vulnerability allows local attackers to elevate privileges directly to root. Furthermore, technical details of the vulnerability and working proof-of-concept exploit code have been publicly disclosed. Why It Matters Industry estimates suggest that over 100 million Mac devices run modern macOS installations worldwide. Therefore, flaws that grant root access pose a grave threat to desktop environments.

Apple rolls out simultaneous security patches across three macOS generations ahead of the upcoming macOS 27 release.

At a Glance Actor/Group AnonyMousKIT; a reseller supply chain with a developer, buyers, and hundreds of operators Activity Credit-metered AI-powered PhaaS to harvest Apple credentials and disable Activation Lock Targets Owners of stolen or lost Apple devices, plus some government and education inboxes Scale 506 domains, 168 storefront brands, 6,092 phishing emails, 200 AI calls; active since February 2024 Status…

Apple avisa a los desarrolladores que a finales de año modificará el dominio para el inicio de sesión con Apple

Apple ha enviado una nueva oleada de notificaciones de amenazas a usuarios de 110 países que podrían haber sido víctimas de software espía malicioso.

Attackers have begun exploiting a critical vulnerability in macOS's built-in Screen Sharing feature to gain access to Mac computers without any valid credentials whatsoever. In several confirmed cases, attackers who established this unauthorized connection subsequently obtained root privileges and installed a Monero cryptocurrency miner. An Authentication Bypass in Screen Sharing The vulnerability, tracked as CVE-2026-65400, affects the Screen Sharing feature. According to…