Apple warns iPhone users in 99 countries of mercenary spyware
The October 30 notices are separate from August alerts covering 110 countries, and Apple named no spyware or flaw.
74
- Mentions · 7d69
- Mentions · 30d204
- All mentions417
- First seenAug 13, 2026
- Last mentioned18h ago
Timeline
417 articles · newest firstApple Intelligence is coming to China with iOS 27.3
A November 4 beta adds earlier features and Alibaba’s Qwen, not the new Siri; the full release is set for December.
58
Apple warns of mercenary spyware infections in 99 countries
Recipients include journalists and filmmakers; Apple has now notified users in more than 150 countries and does not name attackers.
74
Apple lists an App Store Connect update with no details
The developer feed shows only a “View release notes” link, with no changes or security fixes stated.
8
Coruna and DarkSword kits steal iPhone data from one web visit
Zimperium found 608 domains serving version-specific chains, including a backdoored npm package that infects visitors of otherwise ordinary sites.
84
Opinion column says Apple hardware has entered a slop era
The piece is a personal essay about foldables, a touch-screen laptop, and Siri, not a security report.
6
DarkSword iOS chain escapes Safari and steals Apple Notes
Zimperium says a tested iOS 18.6.2 device uploaded NoteStore.sqlite and an inventory of 214 apps to attacker infrastructure.
76
Blog explains Apple arm64e pointer authentication and PAC keys
The author says the post has no exploit or bypass and that tests ran on a stock Mac.
38
Show HN tool auto-dismisses macOS local-network prompts
The Hacker News post only shows the project title, with 42 points and 35 comments.
18
Fake Padre Terminal App Store app linked to $23,000 Solana theft
Researcher Iris says 27 wallets were drained after October 25, and theft continued after Apple removed the app.
48
Unreleased Claude built exploit chains for Chrome, Safari, and major OSes
Anthropic says the model made five exploits, including Android data theft and Linux root code execution; vendors have patched.
74
Apple publishes Xcode 27.2 build 27B52
The developer news listing only links downloads and release notes, with no security fixes described in the feed.
16
Coruna iOS exploit kit in malicious ads seeks crypto seed phrases
ADEX says about 50 advertiser accounts delivered version-matched chains for iOS 13.0 through 17.2.1, mainly on older devices.
64
Google unveils Gemini 4 Carbon with leading cyber benchmarks
Access is limited to some cyber defenders under Fairwind, and Google says it resisted every tested indirect prompt injection.
76
Apple fixes CoreGraphics flaw CVE-2026-86950 on older iPhones and iPads
Apple says the out-of-bounds write may have been used in targeted attacks on iOS before iOS 27; iOS 18.7.11 backports the fix.
72
OffensiveCon Japan agenda covers Chrome, Telegram and iOS research
October 27–28 session titles name Skia, Telegram stickers and Muse Spark, but list no CVEs, versions or confirmed attacks.
28
Apple advisory AV26-1099 lists flaws in iOS, macOS, Safari and more
Affected builds are those before the stated iOS, iPadOS, macOS, visionOS, tvOS, watchOS and Safari releases.
48
Ad platform says malware ads fingerprint iOS before payload
ADEX linked about 50 advertiser accounts by shared cloaking behavior and says that does not mean they delivered Coruna.
34
Anthropic says unreleased Claude built Chrome, Android and Linux exploits
Vendors were notified first; Chrome 156 fixed 62 CVEs, and the Linux root flaw is CVE-2026-98432.
82
Unreleased Claude model wrote Chrome, Linux and Android exploit chains
Anthropic says the lab-only chains were reported first and fixed, including Chrome 156, with no real-world incidents.
74
macOS git still trusts compromised eMudhra certificates after 10 days
macOS 27.2, released October 26, left git, curl, and python3 trusting the certificates and undid manual workarounds.
76
Anthropic's unreleased model chained flaws into patched OS exploits
Lab proofs, not live attacks, covered Chrome 156, iOS 26.5.2, Windows CVE-2026-33096, and Linux CVE-2026-98432.
74
Safari type confusion bug allows remote code execution
CVE-2026-86974 is scored CVSS 8.8 and requires a user to open a malicious page or file.
58
macOS CoreText out-of-bounds read can disclose information
CVE-2026-112656 is scored CVSS 3.3 and requires opening a malicious page or file.
28
GAAC losslessly compresses BF16 KV caches about 1.41×
On NVIDIA DGX Spark, 64K-token decode attention sped up 1.19–1.27× and resident KV memory fell about 26%.
50
Anthropic says Claude built critical exploit chains in Chrome, Safari and Android
Google assigned 62 critical or high Chrome CVEs, patched as of Chrome 156; Apple and Google say the Safari and Android issues are fixed.
76
Researchers retract claimed Apple Secure Kernel type-dispatch bug
On native Duo 27.1 firmware, PAN blocks an ordinary Exclave’s fake capability read and returns error 4.
36
Pegasus targeted Serbian professor; prosecutor got spyware alert
Citizen Lab reports at least 15 Pegasus targeting cases before Serbia’s October 25 elections.
68
Apple backports fix for exploited CoreGraphics flaw to older iPhones and iPads
iOS 18.7.11 and iPadOS 18.7.11 also fix an Audio data leak and unauthorized camera access.
76
Apple adds an AI chatbot to Pages, Keynote, and Numbers
The beta assistant uses Apple and OpenAI models on iOS 27, iPadOS 27, and macOS 27, with MCP support.
48
Opera previews WebAI standard for running models in the browser
The early preview in Opera One can use models such as Gemma or Apple’s on-device model, with processing kept on the device.
36
Apple patches 286 iOS and macOS bugs, backports exploited flaw
iOS and iPadOS 18.7.11 carry the CVE-2026-86950 fix; Apple says iOS and macOS 27 are not affected.
76
Apple iOS 27.2 fixes 163 flaws, including critical WebKit RCE
The release addresses memory corruption, sandbox escape, kernel writes, and unauthorized access to sensitive user data across many components.
74
Apple fixes exploited CoreGraphics zero-day in iOS 18.7.11
CVE-2026-86950 is an out-of-bounds write triggered by a crafted file; two other flaws can leak data or open the camera.
82
Apple backports CoreGraphics zero-day patches to older iPhones
CVE-2026-86950, an out-of-bounds write, may have been used in targeted attacks on iOS before iOS 27.
76
Apple patches exploited CoreGraphics zero-day on older iPhones and iPads
iOS and iPadOS 18.7.11 fix CVE-2026-86950, an out-of-bounds write Apple says may have hit specific targets.
78
macOS Tahoe 26.7.2 fixes Accelerate Framework image issue
The advisory says a crafted image may cause unexpected app behavior; the impact line is cut off.
34
Safari 27.2 fixes LinkPresentation crafted-image memory issue
The issue is listed for Safari on macOS Sequoia and macOS Tahoe, and the memory impact is truncated.
36
visionOS 27.2 updates Accelerate Framework image handling
The issue applies to Apple Vision Pro on all models; the crafted-image impact line is truncated.
32
watchOS 27.2 fixes Accounts privacy-preference bypass
A malicious app on Apple Watch Series 9 and later may bypass Privacy preferences; the note is truncated.
34
Related CVEs
by mentions- CVE-2026-8695026%8.8Out-of-Bounds Write in Apple CoreGraphics Enables Code Execution on iOS and macOS
- CVE-2026-654002%9.8Authentication Bypass in Apple macOS Screen Sharing
- CVE-2026-593103%9.8Unauthenticated Path Traversal RCE in Broadcom VMware vCenter Server Syslog
- CVE-2026-5504070%9.1Authentication Bypass in Microsoft SharePoint Server
- CVE-2026-330961%7.5Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to deny service over a network
- Camera access without permission on Apple devices
- CVE-2026-3382477%9.8Unauthenticated Double-Free RCE in Microsoft Windows IKE Extension
- CVE-2026-98432<1%9.8Use-after-free in Linux kernel IPv4 TCP options
- CVE-2026-65339<1%5.0A logic issue was addressed with improved checks
- CVE-2025-68788<1%—Linux kernel: fsnotify: do not generate ACCESS/MODIFY events on child for special files inotify/fanotify do not allow users…
Appears with
- Appleorganization · 103
- macOSproduct · 98
- iOSproduct · 67
- Googlevendor · 61
- Microsoftvendor · 46
- iPadOSproduct · 36
- Metavendor · 31
- Metaorganization · 30
- iPhoneproduct · 27
- Safariproduct · 27
- OpenAIvendor · 21
- Chromeproduct · 21
- CoreGraphicsproduct · 19
- Apple Intelligenceproduct · 17
- visionOSproduct · 16
- Citizen Laborganization · 15
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.