If your iPhone is still running iOS 26, Apple has given you another reason to update.
Apple released iOS 26.7.1 on Sept. 28 to fix CVE-2026-86950, a CoreGraphics vulnerability that could allow arbitrary code execution when a device processes a maliciously crafted file. Apple says it is aware of a report that the flaw “may have been exploited” in an extremely sophisticated attack targeting specific individuals on versions of iOS before iOS 27. Apple’s security advisory does not say who was targeted or identify the attackers.
The disclosure does not point to a widespread attack against ordinary iPhone users. But anyone still on iOS 26 should install the latest available...
Read the full article here