Apple backports CoreGraphics zero-day fix (CVE-2026-86950) to iOS 18
Apple shipped iOS/iPadOS 18.7.11 to backport the fix for CVE-2026-86950, a CoreGraphics zero-day Apple says was used in targeted attacks, to older iPhones and iPads.
Stories tagged: #ios
P7 DarkSword iOS exploit kit adds keychain, crypto-wallet theft
iVerify documented P7, a reworked DarkSword iOS exploit kit that extracts Keychain data and imToken wallet contents and adds two-way C2; IOCs published.
Apple patches exploited CoreGraphics zero-day (CVE-2026-86950)
Apple shipped iOS/iPadOS 26.7.1 and macOS 15.8.1/26.7.1 for CVE-2026-86950, a CoreGraphics out-of-bounds write used in targeted attacks and reported by Meta.