
Apple patches Bluetooth and AirPlay pairing flaws across platforms
Ten fixes cover current and older Apple releases; advisories do not report exploitation of the Apple issues.
12 stories, newest first · one card per story

Ten fixes cover current and older Apple releases; advisories do not report exploitation of the Apple issues.
Updates cover iMessage group access, Bluetooth and AirPlay pairing-code bypasses, and one lock-screen AirPlay issue limited to iOS/iPadOS 26.

iOS and iPadOS 27.2.1 also fix Brotli CVE-2026-111497, which CISA added to the Known Exploited Vulnerabilities catalog on October 27.

The same release covers iPadOS 27.2.1; Apple does not say any of the nine flaws are exploited.

Fixes include Bluetooth pairing-limit bypasses, AirPlay flaws, and iMessage group access; Apple reports no real-world use.

Instinct is valued at $10 billion after a $1 billion round; several rivals run over SMS, iMessage, or RCS.

Calif.io showed the demos in Paris on October 16 and said full details will come later.

Scammers text fake Facebook Marketplace listings using victims' names to provoke replies and confirm live numbers.

Photon raised $4.5 million seed to let developers run agents over iMessage, WhatsApp, and other channels.
Researcher reports a zero-click heap overflow in Apple's OpenEXR decoder, triggered when iMessage parses an image.

Citizen Lab and SHARE Foundation confirm a Serbian student activist's iPhone was infected with NSO Group Pegasus via a zero-click iMessage exploit.

Citizen Lab confirms Pegasus zero-click iMessage spyware infected a Serbian student activist's iPhone amid at least 14 spyware targets in Serbia during 2026.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views