> TritonInfoSec News
Home / Sep 30, 2026 / Story
0
#2 BleepingComputer general September 29, 2026 at 07:33 UTC

Apple patches CoreGraphics zero-day flaw exploited in attacks

By Sergiu Gatlan

AI Summary

Apple released emergency iOS and macOS security updates patching CVE-2026-86950, an out-of-bounds write flaw in CoreGraphics reported by Meta, being exploited in 'extremely sophisticated' targeted attacks. The zero-day represents an active, weaponized threat against iOS devices requiring immediate patching across enterprise and consumer fleets. Apple's characterization of the attack as extremely sophisticated suggests a high-capability threat actor, potentially a nation-state or commercial spyware vendor.

Read full article → https://www.bleepingcomputer.com/news/security/app…

Relevance score: 90.0/100

# More from September 30

  1. 1
    Hackers exploit Citrix NetScaler zero-day to deploy web shells BleepingComputer
  2. 3
    New Spectre v2 attack variant leaks Linux root password hash in minutes BleepingComputer
  3. 4
    French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks The Hacker News
  4. 5
    Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor The Hacker News
  5. 6
    FBI tells ShinyHunters members to turn themselves in after recent arrest BleepingComputer
  6. 7
    Pentagon Personnel Agency Data Breach Impacts 3 Million People SecurityWeek
  7. 8
    JadePuffer agentic AI attacks target Azure, destroy cloud resources BleepingComputer
  8. 9
    Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials The Hacker News
  9. 10
    Misconfigured Supabase apps expose data in over 16,000 databases BleepingComputer