Apple patches Bluetooth and AirPlay pairing flaws across platforms
Ten fixes cover current and older Apple releases; advisories do not report exploitation of the Apple issues.
Stories per day · 30 days
19 RSS
Relatedios39software-release25macos20ipados19beta11siri9spyware8developer-tools7privacy7release-candidate7safari7watchos7accelerate-framework6coregraphics6iphone6visionos6xcode5app-store-connect4
244 stories, newest first · one card per story
Stories tagged #apple
Microsoft patches nearly 1,100 flaws, including exploited Outlook bug
CVE-2026-124194 is the only flaw Microsoft says is already exploited; 63 of this month's fixes are rated critical.
iVerify says spyware infections are reaching people without public profiles
The firm reports 1.07 infections per 1,000 iOS consumer scans in 2026, with three in four detections tied to criminal credential and cryptocurrency theft.
Leaker says Apple Harbor will run local AI models on Macs
Harbor, in a Claris private preview, pools Thunderbolt 5 Macs so open-weight models stay on device.
Public iOS sandbox escape can read other apps' files
Binance says worse_query hits iOS 26.7.1, 27.0.1 and 27.2; no attacks are reported and Apple has not confirmed a fix.
1
Apple patches nine flaws across iOS, macOS, watchOS and visionOS
Updates cover iMessage group access, Bluetooth and AirPlay pairing-code bypasses, and one lock-screen AirPlay issue limited to iOS/iPadOS 26.
Apple patches iMessage group-chat flaws and Bluetooth pairing bugs
iOS and iPadOS 27.2.1 also fix Brotli CVE-2026-111497, which CISA added to the Known Exploited Vulnerabilities catalog on October 27.
Apple patches nine iOS 27.2.1 and iPadOS 27.2.1 flaws, none exploited
Fixes include Bluetooth pairing-limit bypasses, AirPlay flaws, and iMessage group access; Apple reports no real-world use.
Apple sells $49.99 Intelligence Usage Packs for Logic Pro AI limits
Unused pack usage rolls over monthly but expires after 12 months, and Family Sharing is not supported.
Apple releases iPadOS 27.2.1 (24B156)
The listing names build 24B156 and a download link, with no security notes.
Apple lists iOS 27.2.1 (24B156) software release
The developer listing names build 24B156 and only offers downloads, with no security notes.
Apple lists visionOS 27.2.1 (24N124)
The developer release page only links to downloads and gives no changelog or security notes.
Apple lists watchOS 27.2.1 (24S132) for download
The developer listing gives only the build and a download link, with no change or security notes.
Apple accelerates Siri toward agentic AI with app integration
Apple plans to make Siri more agentic to track goals and handle ongoing tasks, with third-party app control expected in Spring.
ARTEX AI agents steal gaming logins and Apple certificates
Check Point says agents took over 190,000 Honor of Kings credential sets; about 3.3 percent, roughly 6,000, still worked.
November 2026 Patch Tuesday forecast highlights exploited PHP vulnerabilities
PHP2Shell exploited in the wild before patches; Broccoli2Shell emergency fix for .NET versions.
1
CISA adds exploited Apple PAC bypass CVE-2024-27834 to KEV
Federal agencies must fix the flaw by November 18, 2026; Sekoia ties its use to APT29 with moderate to high confidence.
Apple cuts some engineers' daily AI token budget to $200
Bloomberg says further cuts could reach $100 a day, or $25 for some non-technical teams, with exceptions available.
Apple to Scan Publicly Shared iCloud Photos in iOS 17.3
Apple will scan iCloud photos and files shared publicly for harmful content in iOS 17.3.
Apple cuts budgets for internal AI usage
Apple lowers daily AI spending caps for engineering teams from $300 to $200 and plans further reductions.
Apple releases App Store Connect API 4.6
Apple provides the App Store Connect API 4.6 for developers to download and review release notes.
Apple releases App Store Connect 3.3.1
App Store Connect is updated to version 3.3.1.
CISA Adds Apple Improper Authentication Vulnerability to KEV Catalog
CISA added CVE-2024-27834, an Apple Multiple Products Improper Authentication Vulnerability, to its KEV Catalog due to active exploitation.
Apple products contain pointer authentication bypass vulnerability
iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain improper authentication vulnerability allowing arbitrary read and write capability.