🚨 Apple has released an important security update for iOS/iPadOS 26.7.1, addressing CVE-2026-86950, an out-of-bounds write vulnerability that may lead to arbitrary code execution.
As we previously reported, this update is highly relevant to the iOS attack activity we have been tracking. Apple confirmed that the vulnerability may have been exploited in highly sophisticated attacks targeting specific individuals on iOS versions before iOS 27.
For crypto users, this is especially concerning given the iOS exploitation activity we have observed targeting sensitive wallet data.
🔐 Please:
• Update your iPhone, iPad, Mac and other Apple devices to the latest available security updates.
• Avoid installing apps from unknown or untrusted sources.
• Do not open suspicious links in Safari or in-app browsers.
• Treat unexpected files, links and app installation prompts with caution.
Stay alert and keep your devices updated.
Apple Security Update:
bs-16i has been updated to version 5.1.0 (iOS/iPadOS/macOS) and version 2.1.0 (Android)!
New in this release:
• Scene export and import
• Cross-platform Scene file compatibility (.bs16iScene)
• Bug fixes and performance improvements
Scene files can now be shared between iOS, iPadOS, macOS (v5.1.0+) and Android (v2.1.0+).
Note: Paths to WaveTables and Songs stored in a Scene are always relative to the Documents folder.
• App Store:
• Google Play:
🚨 GoPlus Security Alert
At Hexacon 2026, researchers demoed 4 bugs against Apple iOS / iPadOS / macOS ( ). One-click: open a malicious PDF in iMessage or Signal and it can run code, then exfil local messages to a remote server. Appears tied to CoreGraphics CVE-2026-86950.
Affected:
iOS / iPadOS < 26.7.1
macOS Tahoe < 26.7.1
Sequoia < 15.8.1
Apple shipped emergency updates 26.7.1 / 15.8.1 on Sept 28:
⚠️ Do not open any suspicious PDF. Update iPhone, iPad, and Mac now, and stay on the latest OS.