Binance warns iOS flaw can leak wallet secrets to other apps
A public WQ Files proof of concept reads other apps' data on iOS 26.7.1, 27.0.1, and 27.2; no crypto losses are confirmed.
66
- Mentions · 7d6
- Mentions · 30d7
- All mentions9
- First seenSep 25, 2026
- Last mentioned1d ago
Timeline
9 articles · newest firstPublic iOS sandbox escape can read other apps' files
Binance says worse_query hits iOS 26.7.1, 27.0.1 and 27.2; no attacks are reported and Apple has not confirmed a fix.
74
Binance warns iOS sandbox escape can expose crypto wallet keys
Public PoC worse_query reads other apps' data on iOS 26 and 27; Apple's latest notes list no fix and no thefts are reported.
64
Binance warns iOS worse_query flaw may expose wallet keys
A public proof of concept describes a sandbox escape; Apple’s November 9 updates are not confirmed as a fix.
66
Binance calls alleged ShinyHunters user-data sale a scam
A forum account offered what it called records of 335 million users, including KYC files and wallet keys.
46
Binance denies breach after alleged ShinyHunters sale of 335 million records
The forum seller sought $900,000 and threatened to leak KYC files, passwords, and wallet keys.
46
US indicts Malaysian national over Madagascar NFT scam compounds
Prosecutors say Chui Kok Wa and five others stole more than $516,695 from 74 cryptocurrency wallets.
58
Fortinet Uncovers SectopRAT Variant Hidden Inside Tampered Legitimate Windows Software
Fortinet found SectopRAT hidden in tampered Italian audio software, using DLL tampering, scheduled tasks, and in-memory loading for remote control and credential theft.
45
Bitget blames North Korea for $387.5M crypto wallet raid
Bitget says North Korean hackers stole about $387.5 million via its wallet backend.
88
Related CVEs
by mentions- Incorrect authorization lets apps read data on Apple devices
Appears with
- Applevendor · 4
- iOSproduct · 4
- worse_querymalware · 2
- ShinyHuntersthreat actor · 2
- SlowMistorganization · 2
- WQ Filesmalware · 1
- WQ Filesproduct · 1
- Fortinetorganization · 1
- Bybitorganization · 1
- Madagascar National Policeorganization · 1
- Bitget Walletproduct · 1
- Mandiantorganization · 1
- Bitgetorganization · 1
- ArechClient2organization · 1
- FBIorganization · 1
- MEXCorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.