Apple backports CoreGraphics zero-day patches to older iPhones
Apple has backported security patches released last month to older iPhones and iPads, addressing a zero-day bug exploited in "extremely sophisticated" targeted attacks on iOS devices.
Excerpt from the primary source: BleepingComputer
Who is affected
Home users · Small businesses · Security professionals
Affected technology: iOS & iPadOS
Why it matters
There are signs this may already be exploited, which usually shortens the time available to patch.
Automated: stated only from CISA listings and the exploitation evidence in the sources below.
What you should do · Update
Install the latest update for iOS & iPadOS. Most devices and browsers can do this automatically; restart the app or device to finish.
Automated guidance based on this story's classification. Check the linked advisories for specifics.
Sources
We link to original and authoritative sources. Headlines and excerpts belong to their publishers.
Original reporting
Related
iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18
Apple patched 286 vulnerabilities in iOS and macOS 27.2 and brought the fix for an exploited CoreGraphics zero-day to older iPhones.
There are signs this may already be exploited, which usually shortens the time available to patch.
Chrome Beta for iOS Update
Hi everyone! We've just released Chrome Beta 157 (157.0.8103.13) for iOS; it'll become available on App Store in the next few days. You can see a partial list of the changes in the Git log . If you find a new issue, please let us know by filing a bug . Chrome Release Team Google Chrome…
Chrome Stable for iOS Update
Hi everyone! We've just released Chrome Stable 156 (156.0.8078.46) for iOS; it'll become available on App Store in the next few hours. This release includes stability and performance improvements. You can see a full list of the changes in the Git log . If you find a new issue, please let us know by filing a bug . Chrome Release Team Google Chrome…
Possible new Cellebrite iPhone Radio Zero-Day
Justin.sh is reporting on a confidential Cellebrite document that has been leaked to him: Cellebrite calls it Advanced Unlocks (AU from here on), not to be confused with the “advanced unlocking services” they’ve marketed for years. A press release from earlier this year confirms AU is a new product for 2026. […] According to Cellebrite, AU: is a “next-generation AFU vector that is more resilient to Apple’s OS…
There are signs this may already be exploited, which usually shortens the time available to patch.