Coin Bureau(@coinbureau):JUST IN: Binance warns Apple users of an iOS flaw that lets malicious apps read seed phrases, private keys and login credentials. The warning names iOS 26.7.1, 27.0.1, and 27.2. Called “worse_query,” it breaks the isolation that normally keeps one app from accessing another app’s local files. The risk extends across apps, beyond Binance, with exposure depending on how apps store and protect sensitive information. Binance urges users to remove untrusted apps and update their software. If a breach is suspected, move funds to a new wallet created on a clean device and reset active login sessions. This comes amid earlier reports of iPhone users losing crypto to malicious apps.

2026.11.10 10:27

JUST IN: Binance warns Apple users of an iOS flaw that lets malicious apps read seed phrases, private keys and login credentials. The warning names iOS 26.7.1, 27.0.1, and 27.2. Called “worse_query,” it breaks the isolation that normally keeps one app from accessing another app’s local files. The risk extends across apps, beyond Binance, with exposure depending on how apps store and protect sensitive information. Binance urges users to remove untrusted apps and update their software. If a breach is suspected, move funds to a new wallet created on a clean device and reset active login sessions. This comes amid earlier reports of iPhone users losing crypto to malicious apps.

Coin Bureau@coinbureau

2026.11.06 10:24

If you're an iPhone user, read this. Hackers just stole $4.06 MILLION in crypto through cyberattacks that started with just one click. The victim said they tapped an ad in Safari before wallet apps were emptied. An iOS exploit kit such as DarkSword is suspected. DarkSword chains together iOS security flaws to compromise vulnerable iPhones. Opening a malicious Safari page is enough to steal passwords, photos, Notes and wallet data. No wallet connection, signature, or approval needed. Other attacks reported in 2026: 1. Instagram ads - iPhone was infected while they scrolled past a malicious ad 2. Pegasus spyware - iPhone was infected without clicking a link or downloading a file. 3. P7 DarkSword - spyware capable of extracting passwords, photos, Notes and wallet data. 4. Fake Apple preorder pages - fake iPhone website launched an infection attempt simply when opened. 5. iMessage - A zero-click exploit infected an iPhone with spyware capable of accessing messages, microphone and camera. 6. Telegram downloads - modified iPhone apps collected location, device information and screenshots while open. 7. App Store malware - 2 apps carried SparkCat, which scanned photos for seed phrases after users granted access. 8. Coruna - 23 exploits used in espionage and financially motivated attacks against older iOS versions. _____ Now here's what you should do: • Update iOS and apps NOW. Enable automatic updates too. • Avoid unsolicited app downloads and configuration profiles. • Limit apps’ access to Photos, location, microphone and camera. • Keep seed phrases out of screenshots and Notes. • Consider Lockdown Mode if you face heightened spyware risks.