🚨 ACTIVE EXPLOITATION
- Apple emergency patch fixes exploited CVE-2026-86950 in iOS 26, macOS 26, macOS 15
CVE-2026-86950
Apple has released an emergency patch for CVE-2026-86950, a vulnerability already being exploited in targeted attacks against iOS 26, macOS 26, and macOS 15.- Applies to users of iOS 26, macOS 26, and macOS 15; iOS and macOS 27 are not affected.
- The vulnerability, CVE-2026-86950, was reported by Meta Product Security and is being exploited in the wild.
- Apple states the issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.
- Today's update for the iOS/macOS 27 branch fixes only functional issues, not security issues; a 27.1 version is expected to support the new foldable iPhone.
🕵️ RESEARCH & DEEP DIVES
- Between Two Nerds: The rise of fully automated LLM-driven hacking campaigns
Risky Business's Between Two Nerds podcast examines the rise of fully automated LLM-driven hacking campaigns among criminals and state hacking groups.- Tom Uren and The Grugq discuss fully automated LLM-driven hacking campaigns used by criminals and even state hacking groups
- A move-fast, break-things AI hacking approach can pay off for actors with the right risk appetite
- Show notes reference autonomous AI agents breaking into hundreds of online retailers and one operator using two AI platforms against nine government agencies