Apple warns users in 99 countries of mercenary spyware
Apple sent a fresh round of threat notifications to suspected mercenary-spyware targets in 99 countries. No vendor, CVE, or actor is named; the count measures reach, not victims.
Apple sent a fresh round of threat notifications to suspected mercenary-spyware targets in 99 countries. No vendor, CVE, or actor is named; the count measures reach, not victims.
Apple shipped iOS/iPadOS 18.7.11 to backport the fix for CVE-2026-86950, a CoreGraphics zero-day Apple says was used in targeted attacks, to older iPhones and iPads.
iVerify documented P7, a reworked DarkSword iOS exploit kit that extracts Keychain data and imToken wallet contents and adds two-way C2; IOCs published.
Apple shipped iOS/iPadOS 26.7.1 and macOS 15.8.1/26.7.1 for CVE-2026-86950, a CoreGraphics out-of-bounds write used in targeted attacks and reported by Meta.