Hacks & Security
Bearish
Apple patches iOS CoreGraphics flaw that may have targeted crypto users
Image: Crypto.newsApple released iOS 26.7.1 and iPadOS 26.7.1 on September 28 to fix CVE-2026-86950, a CoreGraphics out-of-bounds write flaw that allows arbitrary code execution. Meta Product Security identified the vulnerability. Apple said it may have been exploited in highly targeted attacks against specific users before iOS 27. Blockchain security firm SlowMist warned crypto users to update affected devices, as the flaw could expose sensitive wallet information. Apple has not confirmed the vulnerability was used to steal cryptocurrency or drain wallets.
Key points
- The CVE-2026-86950 CoreGraphics flaw can enable arbitrary code execution on affected devices
- Meta Product Security identified the CVE-2026-86950 vulnerability
- SlowMist warned crypto users to update devices as the flaw could expose sensitive wallet information
Why it matters
The vulnerability creates potential exposure for crypto users storing wallet credentials on unpatched Apple devices. Installing the released security updates reduces this risk for affected users.
What's unclear
Apple has not confirmed CVE-2026-86950 was used to steal cryptocurrency or drain crypto wallets
Apple and Google have not independently confirmed reports of iOS 26.5 crypto wallet attack capability
Sources · 2 publishers
Blockonomi
Tier 3
Apple Inc. (AAPL) Stock: Releases Emergency iOS Update Over Crypto Wallet Security Risk
Coverage timeline
- First reported by Crypto.news
- Confirmed by Blockonomi
- CryptoVideos brief published
How this brief was made. Our system found this event in 2 independent publications, summarised two complete reports with AI and checked every number above against the source text. Sources are linked in full. Not financial advice. Report an error
