Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads

AI Summary

Apple backported patches for CVE-2026-86950, an out-of-bounds write in CoreGraphics with a CVSS score of 8.8, to older iPhones and iPads after the flaw was exploited in 'extremely sophisticated' targeted attacks. The fix was originally released last month for current iOS devices; the backport extends coverage to users unable to run the latest OS versions. Defenders should treat this as urgent given confirmed in-the-wild exploitation.

Read full article → https://thehackernews.com/2026/10/apple-backports-…

Relevance score: 85.0/100

# More from October 28

1
Code-execution flaw in UEFI firmware threatens most servers on planet Earth Ars Technica Security
2
CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution The Hacker News
3
Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption The Hacker News
5
Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens The Hacker News
6
Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers The Hacker News
7
Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key The Hacker News
8
Tailscale warns of SSH flaws allowing root privilege escalation BleepingComputer
9
UNM Health ransomware attack disrupts patient care, surgeries BleepingComputer
10
HPE Patches Dozens of Critical Flaws in Networking Products SecurityWeek