Live Feeds
● LIVE Updated 1h ago · 15 sources tracked

Apple patches iPhone flaw used in 'extremely sophisticated' attacks, crypto wallets at risk

Apple released emergency software updates to address a zero-day vulnerability affecting iPhones, iPads, and Macs. The security flaw, tracked as CVE-2026-86950, involves an out-of-bounds write issue in CoreGraphics that allows attackers to execute arbitrary code via a maliciously crafted file. Apple acknowledged that the vulnerability has already been exploited in extremely sophisticated targeted attacks on older iOS versions. The discovery prompts urgent patching across millions of devices, while security analysts warn that unpatched systems face heightened risks, particularly concerning crypto wallet data.

🎙️

Listen to Live Briefing

Real-time synthesized voice briefing · Live Feeds Desk

⏱ ~3 min
Speed:
RSS Source map (15)
⚡ Key Developments & Real-Time Context
Text size:
  • ✓ Apple released iOS 26.7.1 and iPadOS 26.7.1 to fix CVE-2026-86950, a CoreGraphics vulnerability.
  • ✓ Apple stated the flaw may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.
  • ✓ Meta Product Security discovered the vulnerability and reported it to Apple.
  • ✓ CISA added the vulnerability to its known-exploited list and urged users to update devices.
🛡️ Source Corroboration: 15 independent reporting domains (95% confidence) ⏱ Read time: ~2 min

What changed

Security researchers published the first public proof-of-concept for the CoreGraphics vulnerability as WhatsApp PDF checks hinted at a potential delivery vector.

Live updates

  1. Apple Patches Zero-Day CoreGraphics Flaw Exploited in Attacks

    Apple released emergency software updates to address a zero-day vulnerability affecting iPhones, iPads, and Macs. The security flaw, tracked as CVE-2026-86950, involves an out-of-bounds write issue in CoreGraphics that allows attackers to execute arbitrary code via a maliciously crafted file. Apple acknowledged that the vulnerability has already been exploited in extremely sophisticated targeted attacks on older iOS versions. The discovery prompts urgent patching across millions of devices, while security analysts warn that unpatched systems face heightened risks, particularly concerning crypto wallet data.

    Why it matters

    Zero-day vulnerabilities that bypass standard device defenses pose severe risks to high-value targets, including cryptocurrency holders. Meta Product Security discovered the flaw, and subsequent analysis revealed a proof-of-concept utilizing malicious PDFs with crafted embedded fonts. CISA has added the vulnerability to its known-exploited list, underscoring the urgency for global users to install the latest patches immediately.

    What is confirmed

    • Apple released iOS 26.7.1 and iPadOS 26.7.1 to fix CVE-2026-86950, a CoreGraphics vulnerability.
    • Apple stated the flaw may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.
    • Meta Product Security discovered the vulnerability and reported it to Apple.
    • CISA added the vulnerability to its known-exploited list and urged users to update devices.

    Still unconfirmed

    • Crypto wallet data on target iPhones faces immediate risk from active exploitation of the CoreGraphics flaw.

    What to watch next

    • Broader telemetry or analysis confirming the exact delivery path of the malicious PDF files via WhatsApp.
    • Additional advisories from cybersecurity firms regarding active exploitation of crypto wallets.
    Sources used for this update (16)
    1. Forbes — iOS 26.7.1—Update Now Warning Issued To iPhone Users
    2. darkreading.com — Apple Zero-Day Vulnerability Weaponized in Targeted Attacks
    3. Tom's Guide — Apple issues emergency update for millions of iPhones, iPads, and Macs — update your devices now
    4. The Hacker News — Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path
    5. thehackernews.com — Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path
    6. www.coinlive.com — Apple Fixes iPhone Security Flaw That May Have Been Exploited As Crypto Wallet Data Faces Risk
    7. Yahoo Finance — Apple patches iPhone flaw used in 'extremely sophisticated' attacks, crypto wallets at risk
    8. finance.yahoo.com — Apple patches iPhone flaw used in 'extremely sophisticated' attacks, crypto wallets at risk
    9. stratechery.com — Apple and a Hacker’s Future
    10. tdpelmedia.com — Apple Scrambles to Patch Zero-Day Flaw Exploited Against iPhone Crypto Wallet Users - TDPel Media
    11. finance.yahoo.com — Cathie Wood increases stake in surging crypto ETF
    12. www.bitdefender.com — Apple patches zero-day behind ‘extremely sophisticated ...
    confidence 95%
📊

Community Sentiment: How do you assess this situation?

Voice your perspective · Real-time aggregated sentiment from the Live Feeds community