Live Feeds
● LIVE Updated 1h ago Β· 14 sources tracked

Apple issues emergency update for millions of iPhones, iPads, and Macs

Apple issued an emergency security update, including iOS 26.7.1, to fix a zero-day vulnerability affecting millions of iPhones, iPads, and Macs. The flaw, identified as CVE-2026-86950, exists in the CoreGraphics engine used for interface and screen processing. A malicious file can trigger the bug, allowing attackers to run arbitrary code on devices. Apple confirmed the vulnerability was used in sophisticated attacks targeting specific individuals. Users on iOS 26, iPadOS 26, and macOS 26 are urged to update immediately to prevent device hijacking.

πŸŽ™οΈ

Listen to Live Briefing

Real-time synthesized voice briefing Β· Live Feeds Desk

⏱ ~3 min
Speed:
RSS Source map (14)
⚑ Key Developments & Real-Time Context
Text size:
  • βœ“ Apple released iOS 26.7.1 to patch a zero-day vulnerability.
  • βœ“ The flaw affects iPhones, iPads, and Macs running iOS 26, iPadOS 26, and macOS 26.
  • βœ“ The vulnerability allows attackers to run code on a device via a malicious file.
  • βœ“ Apple stated the bug was used to attack specific targeted individuals.
πŸ›‘οΈ Source Corroboration: 14 independent reporting domains (95% confidence) ⏱ Read time: ~2 min

What changed

Meta's security team identified the specific flaw as CVE-2026-86950 located in the CoreGraphics engine.

Live updates

  1. Apple releases emergency patch for iOS 26 zero-day vulnerability

    Apple issued an emergency security update, including iOS 26.7.1, to fix a zero-day vulnerability affecting millions of iPhones, iPads, and Macs. The flaw, identified as CVE-2026-86950, exists in the CoreGraphics engine used for interface and screen processing. A malicious file can trigger the bug, allowing attackers to run arbitrary code on devices. Apple confirmed the vulnerability was used in sophisticated attacks targeting specific individuals. Users on iOS 26, iPadOS 26, and macOS 26 are urged to update immediately to prevent device hijacking.

    Why it matters

    The vulnerability was discovered by Meta's security team. It is described as a zero-click flaw, meaning it can be triggered without user interaction. This patch specifically targets users who have not yet upgraded to iOS 27.

    What is confirmed

    • Apple released iOS 26.7.1 to patch a zero-day vulnerability.
    • The flaw affects iPhones, iPads, and Macs running iOS 26, iPadOS 26, and macOS 26.
    • The vulnerability allows attackers to run code on a device via a malicious file.
    • Apple stated the bug was used to attack specific targeted individuals.
    • The vulnerability is located in the CoreGraphics engine.

    Still unconfirmed

    • The attack is described as an extremely sophisticated attack plaguing devices.
    • The flaw is a zero-click vulnerability.

    What to watch next

    • Reports on the number of devices successfully compromised by the exploit
    • Official confirmation of the specific nature of the targeted attacks
    • Further updates for macOS and iPadOS version numbers
    Sources used for this update (18)
    1. Forbes β€” iOS 26.7.1β€”Update Now Warning Issued To iPhone Users
    2. darkreading.com β€” Apple Zero-Day Vulnerability Weaponized in Targeted Attacks
    3. CNET β€” Still on iOS 26? You Need to Download iOS 26.7.1 Now for This Zero-Day Patch
    4. Tom's Guide β€” Apple issues emergency update for millions of iPhones, iPads, and Macs β€” update your devices now
    5. malwarebytes.com β€” Update your iPhone, iPad, or Mac: Flaw could run attackers’ code
    6. techcrunch.com β€” Still running iOS 26? Update your iPhones, iPads, and Macs ...
    7. www.malwarebytes.com β€” Update your iPhone, iPad, or Mac: Flaw could run attackers ...
    8. www.dailymail.com β€” Apple issues warning to iPhone users over 'sophisticated attack' hijacking devices: Act NOW
    9. www.computerworld.com β€” Apple issues urgent iOS patch as it navigates the spyware arms race – Computerworld
    10. www.tomsguide.com β€” Apple issues emergency update for millions of iPhones, iPads, and Macs β€” update your devices now
    11. tech.yahoo.com β€” Security researchers discover fake ChatGPT ads that trick you into downloading malware
    12. www.tomsguide.com β€” Amazon expands FTC settlement, pays Prime members up to $200
    confidence 95%
πŸ“Š

Community Sentiment: How do you assess this situation?

Voice your perspective Β· Real-time aggregated sentiment from the Live Feeds community