Apple Intelligence is coming to China with iOS 27.3
A November 4 beta adds earlier features and Alibaba’s Qwen, not the new Siri; the full release is set for December.
58
- Mentions · 7d22
- Mentions · 30d35
- All mentions69
- First seenAug 14, 2026
- Last mentioned16h ago
Timeline
69 articles · newest firstCoruna and DarkSword kits steal iPhone data from one web visit
Zimperium found 608 domains serving version-specific chains, including a backdoored npm package that infects visitors of otherwise ordinary sites.
84
DarkSword iOS chain escapes Safari and steals Apple Notes
Zimperium says a tested iOS 18.6.2 device uploaded NoteStore.sqlite and an inventory of 214 apps to attacker infrastructure.
76
Coruna iOS exploit kit in malicious ads seeks crypto seed phrases
ADEX says about 50 advertiser accounts delivered version-matched chains for iOS 13.0 through 17.2.1, mainly on older devices.
64
Apple fixes CoreGraphics flaw CVE-2026-86950 on older iPhones and iPads
Apple says the out-of-bounds write may have been used in targeted attacks on iOS before iOS 27; iOS 18.7.11 backports the fix.
72
OffensiveCon Japan agenda covers Chrome, Telegram and iOS research
October 27–28 session titles name Skia, Telegram stickers and Muse Spark, but list no CVEs, versions or confirmed attacks.
28
Apple advisory AV26-1099 lists flaws in iOS, macOS, Safari and more
Affected builds are those before the stated iOS, iPadOS, macOS, visionOS, tvOS, watchOS and Safari releases.
48
Ad platform says malware ads fingerprint iOS before payload
ADEX linked about 50 advertiser accounts by shared cloaking behavior and says that does not mean they delivered Coruna.
34
Apple backports fix for exploited CoreGraphics flaw to older iPhones and iPads
iOS 18.7.11 and iPadOS 18.7.11 also fix an Audio data leak and unauthorized camera access.
76
Apple patches 286 iOS and macOS bugs, backports exploited flaw
iOS and iPadOS 18.7.11 carry the CVE-2026-86950 fix; Apple says iOS and macOS 27 are not affected.
76
Apple iOS 27.2 fixes 163 flaws, including critical WebKit RCE
The release addresses memory corruption, sandbox escape, kernel writes, and unauthorized access to sensitive user data across many components.
74
Apple fixes exploited CoreGraphics zero-day in iOS 18.7.11
CVE-2026-86950 is an out-of-bounds write triggered by a crafted file; two other flaws can leak data or open the camera.
82
Apple backports CoreGraphics zero-day patches to older iPhones
CVE-2026-86950, an out-of-bounds write, may have been used in targeted attacks on iOS before iOS 27.
76
Apple patches exploited CoreGraphics zero-day on older iPhones and iPads
iOS and iPadOS 18.7.11 fix CVE-2026-86950, an out-of-bounds write Apple says may have hit specific targets.
78
Apple issues iOS 18.7.11 and iPadOS 18.7.11 security update
The notice names the Audio component and lists older iPhone and iPad models that receive the update.
32
Apple issues iOS 26.7.2 and iPadOS 26.7.2 security update
The notice names the Accelerate Framework and starts the device list at iPhone 11 and later.
32
Apple issues iOS 27.2 and iPadOS 27.2 security update
The notice names the Accelerate Framework for iPhone 11 and later and newer iPad Pro models.
32
Instagram ads used to deliver Coruna and DarkSword to iPhones
The DeadTag operation also abuses expired analytics domains referenced by sites that together draw about 135 million monthly visits.
74
Instagram ads deliver DarkSword spyware to vulnerable iPhones without a tap
iVerify and Report URI say DarkSword P7 and Coruna hit older iOS via ads and reclaimed domains, not proven on fully updated phones.
72
Apple October 2026 updates patch 304 flaws, including prior exploit
Already exploited CoreGraphics flaw CVE-2026-86950 now gets iOS 18 fixes; no newly exploited bug is flagged.
76
Apple releases iOS and macOS 27.2 with new Siri AI features
Siri can recall past chats and use voicemails and Messages attachments, but stays unavailable in Europe and mainland China.
42
Apple publishes iOS 27.2 (24B91020)
The listing names build 24B91020 and does not describe security issues or patches.
20
Apple accepts Security Research Device applications through October 30
Approved researchers get a 12-month loaner iPhone with shell access, custom entitlements, and kernel changes.
34
Show HN post says full iOS 16.5 firmware runs on Android
The feed only links the hackios-xnu-kernel repository and notes 53 points and 22 comments.
20
Safari and WebKit block services that turn emails into tracking IDs
The blocks ship in iOS 27, iPadOS 27, macOS 27, and visionOS 27 and stop pages from sending addresses to identity-resolution servers.
34
Apple lists iOS 27.2 release candidate build 24B115
The feed entry only links to downloads and release notes and describes no security fixes.
6
"In every study that considered the question"
An essay argues that unlabeled icons in cars and iOS are harder to understand than text labels.
4
Researchers Demonstrate iOS 27.0.1 Untethered Jailbreak on iPhone 18 Pro
Researchers showed an untethered iOS 27.0.1 jailbreak on an iPhone 18 Pro at Hexacon.
74
iOS 27.2 beta 4 (24B5110a)
Apple released iOS 27.2 beta 4 (build 24B5110a) to developers.
20
P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
iVerify details P7 DarkSword, an iOS exploit kit that steals keychains and crypto wallets and accepts remote commands.
77
DarkSword iOS Exploit Platform Uses Coruna Malware to Steal Crypto Wallet Recovery Phrases
DarkSword's Coruna malware uses iOS browser exploits to steal cryptocurrency wallet recovery phrases from iPhones.
72
Possible Vulnerability in Apple’s Automatic Reboot
Magnet Forensics' GrayKey Preserve reportedly bypasses iPhone inactivity reboot so forensic data stays available.
56
iOS 27.2 beta 3 (24B5099f)
Apple published iOS 27.2 beta 3, build 24B5099f, with no security details in the notice.
12
Cybersecurity Newsletter Bulletin – Pentagon Data Breach, Citrix, Fortimail and Apple 0-days and 20+ stories
Pentagon breach exposed about 3 million personnel records while Apple, FortiMail, and Citrix zero-days were exploited.
90
Week in review: Researcher breaks into Microsoft analytics service, NetScaler RCE 0-day exploited
Weekly roundup: NetScaler, Apple, Cisco SD-WAN, and FortiMail zero-days exploited; Microsoft analytics flaw disclosed.
76
CVE-2026-86950: The Great Glyph Grift - An in-the-wild iOS bug with a possible WhatsApp zero-click path
Apple fixed in-the-wild CoreGraphics CVE-2026-86950 in iOS 26.7.1; crafted PDF fonts can trigger an out-of-bounds write.
86
Cops Can Bypass iPhone’s Automatic Reboot to Get Into Locked Phones, Leaked Video Claims
Magnet Forensics' GrayKey Preserve claims to freeze iPhones in After First Unlock, bypassing Apple's inactivity reboot.
60
Public PoC Released for Apple CoreGraphics Zero-Day CVE-2026-86950
Public crash PoC released for Apple CoreGraphics zero-day CVE-2026-86950, reportedly used in targeted attacks.
82
Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path
Researchers published a crash-only PoC for Apple CoreGraphics CVE-2026-86950, which CISA listed as exploited.
86
Mobile malware warning from Ukrainian researchers includes iPhone exploit kit
Ukraine warns Russian-aligned hackers are infecting military and officials' iPhones and Android phones for espionage.
76
Related CVEs
by mentions- CVE-2026-8695026%8.8Out-of-Bounds Write in Apple CoreGraphics Enables Code Execution on iOS and macOS
- Camera access without permission on Apple devices
- CVE-2026-65339<1%5.0A logic issue was addressed with improved checks
- CVE-2025-242014%10.0WebKit Out-of-Bounds Write Sandbox Escape in Apple iOS, Safari, and macOS
- CVE-2025-3120021%9.8Memory Corruption in Apple iOS, iPadOS, macOS Audio Processing Enables Code Execution
- CVE-2026-207002%7.8Exploited Memory Corruption Flaw in Apple iOS, iPadOS, macOS, tvOS, visionOS, watchOS
- Out-of-bounds write in Apple OS via a local app
- Out-of-bounds write in Apple image handling crashes apps
- Out-of-bounds write when processing video on Apple OSes
Appears with
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.