GoPlus Security 🚦(@GoPlusSecurity):🚨 GoPlus Security Alert At Hexacon 2026, researchers demoed 4 bugs against Apple iOS / iPadOS / macOS ( https://t.co/5HHTOBgx2E ). One-click: open a malicious PDF in iMessage or Signal and it can run code, then exfil local messages to a remote server. Appears tied to CoreGraphics CVE-2026-86950. Affected: iOS / iPadOS < 26.7.1 macOS Tahoe < 26.7.1 Sequoia < 15.8.1 Apple shipped emergency updates 26.7.1 / 15.8.1 on Sept 28: https://t.co/D6g8prrLzq ⚠️ Do not open any suspicious PDF. Update iPhone, iPad, and Mac now, and stay on the latest OS.

2026.10.17 12:13

🚨 GoPlus Security Alert At Hexacon 2026, researchers demoed 4 bugs against Apple iOS / iPadOS / macOS ( ). One-click: open a malicious PDF in iMessage or Signal and it can run code, then exfil local messages to a remote server. Appears tied to CoreGraphics CVE-2026-86950. Affected: iOS / iPadOS < 26.7.1 macOS Tahoe < 26.7.1 Sequoia < 15.8.1 Apple shipped emergency updates 26.7.1 / 15.8.1 on Sept 28: ⚠️ Do not open any suspicious PDF. Update iPhone, iPad, and Mac now, and stay on the latest OS.