iOS Update Addresses Critical Security Flaw CVE-2026-28950
Article Content
- •CVE-2026-28950 allows retrieval of deleted notifications, posing a privacy risk.
- •iOS update 26.4.2 released on May 2, 2026, addresses this critical flaw.
- •Users are advised to update their devices immediately for optimal security.
On April 22, 2026, Apple published CVE-2026-28950, a critical security flaw that allowed deleted notifications to be retrieved, posing a significant privacy risk. The issue affects all iPhones starting from the iPhone 11 and several iPad models. In response, Apple released iOS update 26.4.2 on May 2, 2026, which addresses this vulnerability along with a broader logging vulnerability related to data redaction. Users are strongly encouraged to install the update immediately to enhance their device's security and performance. The update is relatively small, typically under 1GB, and includes improvements in keyboard responsiveness and battery life. The flaw was first highlighted in a YouTube video, which raised awareness about the risks involved. This incident underscores the importance of timely software updates in maintaining user privacy and device integrity.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Coruna and CVE-2026-28950 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Spyware Campaign Targets iPhones via Legitimate Websites Cybercriminals have exploited thousands of legitimate websites to deliver spyware targeting iPhones, enabling crypto theft without user interaction. Researchers identified two campaigns linked to suspected Chinese hackers, affecting at least 6,600 websites with a combined traffic of 49 million monthly visits. One… 
P7 DarkSword Malware Targets iPhones for Crypto Wallet Theft Researchers have identified a new variant of the DarkSword malware, named P7 DarkSword, which targets unpatched iPhones to steal sensitive information, including cryptocurrency wallet data. Discovered by iVerify, the malware was found on a financial institution employee's device in August 2026. P7 DarkSword enhances…