Active Exploitation of WebKit Vulnerabilities in iOS 26+

Digg

Active Exploitation of WebKit Vulnerabilities in iOS 26+

First seen 26 Jan 2026, 15:53 UTC • •20.3

Article Content

1 / 3

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

Apple has confirmed the active exploitation of two WebKit zero-day vulnerabilities in iOS, affecting iPhone users. Users are urged to update to iOS 26+ to receive full protections, as the vulnerabilities allow attackers to execute arbitrary code through malicious web content. Restarting devices after updating is recommended to enhance security by flushing any memory-resident malware.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 192d ago How this analysis works

More articles in this cluster (2)

Threat Graph

6 entities, 5 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (2)

Malware
Zero-day Exploit

Organization (1)

Apple

Malware (1)

Liquid Glass

Affected Platform (2)

IOS
WebKit

Relationships

Liquid Glass targets Apple
Malware targets IOS
Malware targets WebKit
Zero-day Exploit targets IOS
Zero-day Exploit targets WebKit

Following this threat?

Track Liquid Glass and Apple in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Zero-Day Vulnerability in Cisco Secure Email Gateway Exploited On September 14, 2026, Cisco disclosed a critical SQL injection vulnerability (CVE-2026-76461) in its Secure Email Gateway, allowing unauthenticated remote attackers to execute arbitrary commands with root privileges. This vulnerability arises from insufficient validation in the email parsing logic. Cisco confirmed…

Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API…