Apple (Nasdaq: AAPL) released an emergency-grade security update on Sept. 28, and this one is not routine, the company says the flaw it fixes may already have been used in real attacks, and a blockchain security firm is warning that crypto wallet holders have particular reason to install it.
The update, iOS 26.7.1 and iPadOS 26.7.1, closes a vulnerability tracked as CVE-2026-86950 in CoreGraphics, the framework iPhones and iPads use to render images.
Related: Google, Apple’s new job postings go viral
A malicious file is all it takes
In plain terms, the bug let a specially crafted file, such as an image, write data outside the patch of memory it was assigned, a class of flaw known as an…
