#ios
-
Apple brings CoreGraphics zero-day fix to older iPhones and iPads
Apple has released patches for older iPhones and iPads that close a zero-day vulnerability in CoreGraphics. According to the company, the flaw was used in "extremely sophisticated" targeted attacks.
-
GrayKey Defeats the iPhone's Inactivity Reboot
A maker of phone-cracking tools has found a way around the iOS feature that moves an idle iPhone into a more secure state. Instead of rebooting after 72 hours, the data is preserved indefinitely.
-
Signal completes rollout of encrypted backups across all platforms
Version 8.30 brings the secure backups feature to iOS and desktop apps. Chats can now be stored locally or on Signal's servers and restored on another device.
-
A Firebase Server-Side Change Crashed iOS Apps Worldwide
A server-side change made the Firebase SDK crash across every iOS app session — from DoorDash to countless others. Developers spotted the outage before Firebase itself did.
-
Apple patches actively exploited CoreGraphics zero-day
Apple has shipped security updates that fix a zero-day flaw used in "extremely sophisticated" targeted attacks against iOS devices.
-
One Pixel Too Many: A 0-Click Flaw in Apple's EXR Decoder
An ironPeak researcher details CVE-2026-86869: Apple's EXR image decoder on iOS, iPadOS and macOS overran a heap buffer, and the attack could be delivered over iMessage without a single tap.
-
ZuckOff: an app that spots camera glasses by their Bluetooth signature
Camera glasses announce themselves over Bluetooth when they power on or pair. ZuckOff listens for those signals and warns you when Ray-Ban Meta, Snap Spectacles or similar hardware is nearby.
-
Pegasus in Serbia Again: Activist's iPhone Infected via Zero-Click in iMessage
Citizen Lab and the SHARE Foundation have documented the infection of a student protest movement member's phone with the Pegasus spyware. Since the start of 2026, at least 14 people in the country have been targeted.
-
Firefox for iOS Gets a Built-In Ad Blocker
Mozilla has added a native, built-in ad-blocking mechanism to its Firefox mobile browser for iOS — no third-party extensions required.
-
iCloud Private Relay Is Exposing Users' Real IP Addresses
Researchers have uncovered a series of flaws in Apple's browser engine that cause the company's flagship privacy tool to stop hiding the user's real IP. The outlet 404 Media confirmed the leak in its own testing.
-
Apple Opens Public Access to the Revamped Siri in the iOS 27 Beta
The company has released a public beta of iOS 27, letting iPhone owners try out the reworked Siri AI assistant ahead of the official release this fall.