DarkSword iOS chain escapes Safari and steals Apple Notes
Zimperium says a tested iOS 18.6.2 device uploaded NoteStore.sqlite and an inventory of 214 apps to attacker infrastructure.
Stories per day · 30 days
2 RSS
Relatedapple3ios3safari2apple-notes1coruna1darksword1drive-by1email1go1jailbreak1kernel1macos1memory-corruption1ns2jb1privacy1sandbox1scraper1smilebasic1
20 stories, newest first · one card per story
Stories tagged #webkit
Apple patches 286 iOS and macOS bugs, backports exploited flaw
iOS and iPadOS 18.7.11 carry the CVE-2026-86950 fix; Apple says iOS and macOS 27 are not affected.
Apple iOS 27.2 fixes 163 flaws, including critical WebKit RCE
The release addresses memory corruption, sandbox escape, kernel writes, and unauthorized access to sensitive user data across many components.
webframe executes a web page like a program in a system browser
Jeff Lindsay's Go tool uses glaze and the host browser, and was tested as a scraper and sandbox.
Software-only jailbreak released for Switch 2 firmware 23.0.1
ns2jb is tethered, runs native code as sysmodules, and was used to mod Mario Kart World.
Safari and WebKit block services that turn emails into tracking IDs
The blocks ship in iOS 27, iPadOS 27, macOS 27, and visionOS 27 and stop pages from sending addresses to identity-resolution servers.
P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
iVerify details P7 DarkSword, an iOS exploit kit that steals keychains and crypto wallets and accepts remote commands.
13
DarkSword iOS Exploit Platform Uses Coruna Malware to Steal Crypto Wallet Recovery Phrases
DarkSword's Coruna malware uses iOS browser exploits to steal cryptocurrency wallet recovery phrases from iPhones.
Sony PS5 Relapse Jailbreak Exploit Uses JSC Memory Corruption and Kernel UAF
Researchers released Relapse, a tethered PS5 jailbreak for firmware 7.00–13.60 using WebKit JSC corruption and a kernel use-after-free.
Sony Rolls Out PS5 Security Update Following the Release of Relapse Jailbreak
Sony’s PS5 firmware 14.00 sits outside the public Relapse jailbreak, which hits firmware 7.00 through 13.60.
New PS5 Relapse Exploit Breaks Into the Kernel Across Years of Firmware Releases
Researchers released Relapse, a tethered PS5 jailbreak chaining a WebKit browser flaw with a kernel bug affecting firmware 7.00–13.60.
Re: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006
An oss-security reply points to WebKit advisory coverage of CVE-2025-6558.
WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006
WebKitGTK and WPE WebKit published security advisory WSA-2026-0006.
The Apple Security Update Review for September 2026
Apple's September 2026 updates patch 45+ flaws, including a 9.8 Screen Sharing authentication bypass (CVE-2026-65400) already listed in CISA's KEV.
Apple Releases iOS 27 Security Update to Fix Over 120 Vulnerabilities
Apple released iOS 27 and iPadOS 27 patching roughly 126 vulnerabilities across kernel, WebKit, sandboxing, and authentication components; no active exploitation reported.
Apple Rolls Out Massive Security Update Fixing 273 Vulnerabilities Across Its Devices
Apple's coordinated rollout patches 273 unique vulnerabilities across iOS 27, macOS Golden Gate 27, watchOS and Safari, including remote code execution flaws.
Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases
Apple patched a record 200+ vulnerabilities in iOS 27 and macOS Golden Gate 27, including 20 kernel flaws; none exploited in the wild.
Apple Updates Everything, (Mon, Sep 14th)
Apple patched a record 261 vulnerabilities across iOS 27, macOS Golden Gate 27, watchOS 27, and other platforms, with none flagged as exploited.
13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds
Trojanized Packagist themes inject JavaScript into Vietnamese streaming sites, exploiting unpatched iPhone WebKit and kernel flaws to install spyware and steal crypto wallet seeds.
6
Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses
Researchers found WebKit features bypass proxies and iCloud Private Relay, leaking users' real IP addresses; Apple patched in iOS 26.6.1 and macOS 26.6.2.
2