Cyber Security News on X: " Critical Apple CoreGraphics Zero

X • September 29, 2026

Cyber Security News @The_Cyber_News 🚨 Critical Apple CoreGraphics Zero-Day Vulnerability Actively Exploited in Attacks Details: cybersecuritynews.com/apple-zero-day… Apple has released iOS 26.7.1 and iPadOS 26.7.1 to fix a critical zero-day vulnerability that it says may have been exploited in an extremely sophisticated attack against specifically targeted individuals. The security issue, tracked as CVE-2026-86950, affects the CoreGraphics framework, a fundamental Apple component responsible for rendering graphics, images, and documents across iPhones and iPads. Successful exploitation could allow attackers to execute arbitrary code on a vulnerable device by convincing a victim to process a maliciously crafted file. Apple released the updates on September 28, 2026, and urged users to install them as soon as possible. #cybersecuritynews 8:29 AM · Sep 29, 2026 · 57.2K Views 15 1 5

FAKEASSANT 🗯 @FAKEASSANT 4h I think I’m safe

Vito Botta @vitobotta 6h Updating my phone tonight. 'Extremely sophisticated attack against specific individuals' always means spyware vendors.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Apple Patches CoreGraphics Zero-Day Exploited in Targeted Attacks Apple has released emergency updates for iOS, iPadOS, and macOS to address a critical zero-day vulnerability, CVE-2026-86950, in its CoreGraphics framework. This out-of-bounds write flaw can allow arbitrary code execution when a device processes a maliciously crafted file. The vulnerability was reportedly exploited in highly sophisticated attacks against specific individuals using versions of iOS prior to iOS 27. Meta Product Security reported the issue to Apple, which has not disclosed details about the targeted individuals or the attack methods used. The flaw affects a range of devices, including iPhone 11 and later, and various iPad models. Apple released patches on September 28, 2026, and users are urged to update their devices immediately. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added this vulnerability to its Known Exploited Vulnerabilities catalog, emphasizing the urgency of the situation. 35 sources 73

Extracted Entities

Cyber Security News on X: " Critical Apple CoreGraphics Zero

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

Domains (1)

Platforms (2)

Tools (1)