❌

Visualização de leitura

Apple Begins iCloud Public Link Scanning in iOS 27.3

Apple announced automated iCloud public link scanning starting in iOS 27.3, inspecting shared files and disabling end-to-end encryption on public links.

Related Posts:

The post Apple Begins iCloud Public Link Scanning in iOS 27.3 appeared first on Daily CyberSecurity.

Apple to Scan Publicly Shared iCloud Photos and Files for Harmful Content Starting With iOS 27.3

Apple will start checking iCloud photos and files shared through “Anyone with the Link” for harmful content beginning with iOS 17.3. This policy also applies to iPadOS, macOS, and visionOS version 17.3 or later. It distinguishes between publicly accessible sharing links and content that is restricted to specifically invited recipients. The change appears in an […]

The post Apple to Scan Publicly Shared iCloud Photos and Files for Harmful Content Starting With iOS 27.3 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Unpatchable Hardware Flaws in Older iPhones Allow Attackers to Steal Crypto Wallet Recovery Phrases

Older iPhones that store cryptocurrency recovery phrases are at a continuous security risk due to unpatchable BootROM vulnerabilities, even if the devices are wiped and kept in airplane mode. While attackers require physical access to exploit this vulnerability, doing so does not automatically reveal encrypted wallet data. However, other weaknesses could potentially allow them to […]

The post Unpatchable Hardware Flaws in Older iPhones Allow Attackers to Steal Crypto Wallet Recovery Phrases appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Apple Issues Urgent Security Alerts Over Mercenary Spyware Attacks in 99 Countries

Apple has started sending a new round of threat notifications to users across 99 countries, warning them about targeted mercenary spyware attacks, according to cybersecurity researcher Costin Raiu. In his post, Raiu noted that these notifications are related to new attacks and are separate from the wave of alerts sent out in August. The notification […]

The post Apple Issues Urgent Security Alerts Over Mercenary Spyware Attacks in 99 Countries appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

South Korea App Store Fine Hits Apple and Google

A South Korea app store fine penalizes Apple and Google $48 million for enforcing coercive in-app payment rules and imposing excessive commission fees.

Related Posts:

The post South Korea App Store Fine Hits Apple and Google appeared first on Daily CyberSecurity.

Smashing Security podcast #490: How Jared Kushner’s iPhone was allegedly hacked twice

Dutch spies, Russian hackers and Jared Kushner’s iPhone. It sounds like the ingredients for a thriller, but according to claims in a new book the US President's son-in-law may have been hacked twice. Is any of it true, and what does it tell us about the phones in our pockets? Meanwhile, James Ball explains that of the internet’s most trusted security keys were protected by numbers so small that one of them was... four. Yes, "4". And then, of course, to make the week worse we suffered a PHPocalpyse... Plus, Chuck Randolph of 360 Privacy explains how the internet has made it scarily easy to put company executives and public officials in danger. All this and more in episode 490 of the “Smashing Security” podcast with cybersecurity expert and keynote speaker Graham Cluley, and special guest James Ball.

Apple Blocks eMudhra Certificates Over Weak Key Flaw

Apple blocks eMudhra certificates across macOS and iOS after weak intermediate keys compromised trust, with CLI tool bundles slated for future updates.

Related Posts:

The post Apple Blocks eMudhra Certificates Over Weak Key Flaw appeared first on Daily CyberSecurity.

Apple Released Patches for Exploited CoreGraphics 0-day Vulnerability for Older iPhones

Apple released iOS 18.7.11 and iPadOS 18.7.11 to patch a CoreGraphics zero-day vulnerability that attackers may have used in targeted attacks.

Released on October 26, 2026, the updates bring security fixes to older devices, including the iPhone XS, iPhone XS Max, iPhone XR, and seventh-generation iPad, according to Apple’s security releases page.

Tracked as CVE-2026-86950, the CoreGraphics flaw can allow attackers to run code when a device processes a specially crafted file. Apple credits Meta Product Security with reporting the issue.

The company says it is aware of a report that the flaw “may have been exploited in an extremely sophisticated attack against specific targeted individuals” using iOS versions before iOS 27.

The vulnerability is an out-of-bounds write in CoreGraphics, an Apple component that handles graphics and documents. This bug occurs when software writes data beyond the memory space it’s allocated.

Apple Fix for CoreGraphics 0-Day Flaw

A crafted file can trigger that error and potentially let an attacker run code within the affected process. Apple fixed the issue by adding stronger bounds checks.

The latest release extends protection to older hardware. Cybersecurity News previously covered Apple’s CoreGraphics zero-day patch for newer iPhones, reporting that iOS 26.7.1 and iPadOS 26.7.1 addressed the same CVE in September. Owners of older models now have a security update available on the iOS 18 branch.

Apple’s warning points to targeted exploitation, but the supplied advisory does not name the attackers, identify victims, or explain how the malicious file reached their devices.

It also does not say whether exploitation required user interaction. The available information therefore does not establish a zero-click attack or a wider campaign against ordinary users.

The update also addresses CVE-2026-65339 in the Audio component. Apple says an app could use this logic flaw to leak sensitive user information. The company added improved checks and credited Mustafa Calap (@ordinal0 of dbg. re, and Nik Tsytsarkin of Meta Red Team X.

A third issue, CVE-2026-86990, affects CoreMedia and could allow a malicious app to access the camera without user permission. Apple tightened access restrictions to fix the problem and credited Mustafa Calap. Unlike the CoreGraphics entry, neither of these entries includes an exploitation warning in the supplied advisory.

Apple has previously patched exploited vulnerabilities on older devices, including the iOS 12.5.7 update for an exploited WebKit flaw. These releases show why users should continue checking for security patches even when their devices no longer receive major iOS upgrades.

Users can check for the patch in Settings > General> Software Update. Apple recommends backing up the device, connecting it to power, and using Wi-Fi before installation.

Follow Apple’s update instructions and confirm the installed version afterward. For affected devices, installing this release addresses the disclosed flaws. However, patching alone does not determine whether a device was previously compromised.

Give your SOC the alert context to stops incidents quickly. Integrate Threat Intel from 16K SOCs.

The post Apple Released Patches for Exploited CoreGraphics 0-day Vulnerability for Older iPhones appeared first on Cyber Security News.

❌