Apple closed CVE-2026-86950 in iOS/iPadOS 26.7.1, SlowMist asks crypto users to update

Apple acknowledged that the flaw could have been used in an extremely sophisticated attack on specific individuals, but a link specifically to wallet thefts is not proven.

Update iPhone, iPad and Mac to the latest version (iOS/iPadOS 26.7.1, macOS Tahoe 26.7.1 or Sequoia 15.8.1) and do not open unknown links in Safari.

Facts

• SlowMist writes: Apple released the iOS/iPadOS 26.7.1 update, closing CVE-2026-86950. It is an out of bounds write that can lead to execution of arbitrary code.

• According to SlowMist, Apple confirmed: the vulnerability could have been used in very sophisticated attacks on specific people on iOS versions before iOS 27.

• SlowMist believes the patch is closely connected to iOS attacks on wallet data that the team is tracking. Advice: update all Apple devices, do not install apps from unverified sources, do not open suspicious links in Safari and built in browsers. [@SlowMist_Team, 29 September 2026]

• The Landian publication writes that a connection to recent attacks on crypto users cannot be confirmed: those attacks apparently went through the DarkSword chain and may not be connected to this flaw. [@landiantech, 29 September 2026]

• The bug sits in the CoreGraphics component and triggers when processing a specially crafted file. It was found by Meta Product Security. Apple did not disclose how many people were attacked and whether the attacks were successful. The patch is available for iPhone 11 and newer, several iPads, macOS Tahoe 26.7.1 and Sequoia 15.8.1. [@OffensiveLab, 29 September 2026]

Awaiting:

• Whether CVE-2026-86950 is connected to the attacks that drained crypto wallets, or whether it is a separate story (the DarkSword chain appears in it).

post from telegram channel ahboyashreads • post from telegram channel КриптоАтака 24 ⚡️ • post from telegram channel Кэпитал News