kyber.today

daily cyber × ai intelligence

← index

tagged

[apple]

29 editions · 27 items

October 29, 2026

  • Anthropic's exploit-chain claims met their first detailed audit. The Frontier Red Team's October 27 post describes five chains built by an unnamed internal model — Chrome sandbox escape via a V8 heap bug, CacheStorage race and FedCM use-after-free; a Safari same-origin-policy bypass; data theft from a locked Android phone over USB; an HTTP/3 server DoS; and unauthenticated root over a multipath TCP listener, which Anthropic says took 48 minutes to leak an address and five more to get a shell. All were reported and patched, and Apple and Google credit Anthropic for specific fixes — but the company won't name the model or break down human involvement, and the Windows bug's public record (CVE-2026-33096, HTTP.sys, 7.5) names no finder and is marked not exploited (Anthropic, The Hacker News) (discussion). · AI & Model Security

in Exploit Chains Built by Hand, by Botnet, and by Model

October 28, 2026

  • Apple backported the fix for CoreGraphics out-of-bounds write CVE-2026-86950 (CVSS 8.8) — exploited in what Apple calls an "extremely sophisticated attack against specific targeted individuals" on iOS before 27 — to iOS/iPadOS 18.7.11, covering iPhone XS/XR-era hardware (The Hacker News). The 27.2 releases fix 286 bugs across iOS and macOS, including an Apple Intelligence authorization issue (CVE-2026-86987); none are listed as exploited (SecurityWeek). A separate Chinese-language write-up published PoC analysis of CoreGraphics PDF out-of-bounds writes CVE-2026-112611/112610 (Doonsec). · Vulnerabilities & Exploits

in Pre-Boot RCE in EDK2 Breaks Cover Months Before Its Disclosure Date

October 21, 2026

  • Eight eMudhra intermediate CA private keys were weak enough to recover almost immediately. Six intermediates were for TLS and two for code signing, giving key holders the ability to issue credentials trusted by major platforms. Mozilla, Chrome, Apple, Go and others have blocked them, but stale Linux systems, containers, embedded devices and bundled trust stores will create a long cleanup tail. No malicious TLS issuance has been found in certificate-transparency logs, according to Ars Technica; Mozilla details its response. (discussion) · Vulnerabilities & Exploits

in PHP’s php2shell RCEs Break Cover

October 4, 2026

  • Apple is changing macOS Full Disk Access to stop apps quietly harvesting Messages, mail and browsing history — the announcement landed two weeks after columnist Jason Aten said Meta's Muse agent surfaced an Apple Messages thread he had not knowingly granted it. Meta CTO David Singleton insisted Muse reads Messages only when FDA and the Messages connector are enabled; Patrick Wardle's point, quoted by Ars, is the simpler one: with FDA, any non-root file is readable — chats, cookies, browsing history. Apple's own wording is that "some developers are using Full Disk Access in ways that could put users at risk" (Ars Technica, Apple developer news). Pressure in the other direction continues: Google Gemini on macOS is reportedly moving toward opening files, launching apps and browsing without per-action prompts (BleepingComputer) (discussion). · AI & Model Security

in AI on Both Ends of the Exploit Chain

October 3, 2026

  • Apple iCloud accepts smuggled From: headers, letting an attacker send mail as any iCloud identity — SEC Consult's write-up demonstrates sending as tim.cook@icloud.com by exploiting exotic header parsing (SEC Consult). · Cloud, Identity & Supply Chain
  • Apple CoreGraphics CVE-2026-86950 PoC — Calif researchers (Dion Blazakis, Josh Maine, Anna Groza) published the first public PoC on September 30: a TrueType font with out-of-range glyph coordinates embedded in a PDF, triggering an out-of-bounds write via a bounding-box miscalculation in the rasterizer. Patched September 28 and in KEV, the flaw was credited to Meta Product Security and may have been used against specific targeted individuals pre-iOS 27. The published code causes a crash, not execution — weaponization is separate work the analysis does not demonstrate, and Calif did not obtain the in-the-wild sample (The Hacker News). · New Tools & Releases

in NetScaler Round Two: Patched Appliances Crashing Again as a New SAML Bug Gets Reproduced

September 30, 2026

  • Apple patched CVE-2026-86950, an out-of-bounds write in CoreGraphics that it says may have been exploited in "extremely sophisticated" attacks against specifically targeted individuals on iOS versions before iOS 27; no known macOS exploitation. Reported by Meta's product security team — notable given Meta's prior involvement in WhatsApp/ImageIO zero-click research. CoreGraphics handles image and PDF rendering in mail, browsers and messaging, so delivery paths are broad. CISA had not added it to KEV as of publication (CERT.dk, SecurityWeek). · Vulnerabilities & Exploits
  • Meta disputes claims that its Muse agent read Apple Messages conversations without permission, saying chats are inaccessible unless the user enables both Full Disk Access and the Messages connector (Dan Goodin, AppleInsider) (discussion). · AI & Model Security

in Mandiant Names the NetScaler Post-Exploitation Kit as Patch Rates Stay Under 10%

September 29, 2026

  • Apple shipped an out-of-cycle fix for CVE-2026-86950, an out-of-bounds write in CoreGraphics reachable via a crafted file. Apple says it "may have been exploited in an extremely sophisticated attack against specific targeted individuals" on pre-iOS 27 versions; only the iOS 26 / macOS 26 / macOS 15 branches are affected, and Meta Product Security is credited (SANS ISC, Apple). · Vulnerabilities & Exploits

in PitScaler Goes Global: Citrix NetScaler Chain Exploited for Weeks Before Anyone Had a Patch

August 11, 2026

Metabase Zero-Day Blast Radius Widens to LexisNexis and Framework

The Metabase SQL injection zero-day continues spreading to major customers including LexisNexis and Framework, with no CVE assigned despite maximum severity and unauthenticated remote administrator access. Black Hat Kerberos flaws ResetNightmare and KerberLoss have been weaponized on Linux systems, and North Korea's Kimsuky is deploying offline LLMs and AI-generated decoy documents to industrialize operations. OpenAI released GPT-5.6-Cyber, a defender-focused model answering 98.5% of normally-blocked security queries, while Meta released Muse Glimmer, a 30B open-weight agent model under Apache 2.0 for local deployments. New AI agent hijacking research shows "GhostJacking" attacks manipulating agents through security alerts, and Atlassian Rovo can be exploited via hidden PDF text to steal Jira and Confluence data.

August 10, 2026

  • A pre-auth RCE PoC is circulating for macOS Screen Sharing (CVE-2026-65400). Apple's fix addresses an authentication state-management bug that lets an unauthenticated network attacker reach the service without valid credentials; patched in Sequoia 15.7.9, Sonoma 14.8.9, and Tahoe 26.6.1 (NCSC-NL advisory). Huntress urges immediate patching and has shared detection guidance (Huntress). · Offensive & Exploitation

in ResetNightmare PoC Drops at Black Hat: One Kerberos Flaw, Any Account's Password Reset

July 28, 2026

Agentic AI Muscles Into the Offensive Toolkit

PortSwigger released Burp AT, an agentic-AI testing tool, while researchers demonstrated the first fully AI-written iOS jailbreak (Relaxin) for Apple devices with SPTM protection. Microsoft launched MAI-Cyber-1-Flash, a security model scoring 96% on CyberGym benchmarks for autonomous attack/defense simulation. Multiple zero-day exploits surfaced including a pre-auth vBulletin RCE (CVE-2026-61511), an exploited Arista VeloCloud zero-day, an n8n sandbox escape, and active FastJSON2 exploitation against US firms, while Hugging Face published a CISO post-mortem of autonomous-AI intrusion revealing 17,000+ logged actions and lateral movement.

July 17, 2026

Live SonicWall Exploitation, a New C2 Release, and AI Agents Tricked Into Running Attacker Commands

SonicWall SMA1000 SSL-VPN appliances are under broad-scale exploitation via CVE-2026-15409 leveraging public PoC code, with CVE-2026-56155 remaining unfixed despite July patches. Nighthawk 1.0 C2 released with cross-platform UI and improved evasion capabilities including CET-compatible call-stack masking. AI agents can be compromised through data injection attacks that corrupt trusted facts, enabling attackers to trick agents into executing commands or clicking malicious links without direct prompt injection. Scattered Spider members received 5.5-year sentences for the 2024 Transport for London ransomware attack affecting 7 million users.

July 14, 2026

  • Apple sued OpenAI over alleged trade-secret theft by former employees. @Dinosn · AI & Model Security
  • CrashStealer is a new macOS infostealer written in native C++ (not the usual AppleScript/Objective-C droppers) that poses as Apple's crash-reporting tool, validates the victim's login password locally, and uses a notarized dropper to pass Gatekeeper before harvesting credentials, keychain data, and crypto wallets. BleepingComputer, Jamf via The Hacker News · Malware

in New PoC Spoofs Callstacks Around Intel CET to Blind Modern EDRs

July 6, 2026

The Gentlemen Weaponize a Signed Kontron Driver Into an EDR Killswitch

The Gentlemen ransomware crew exploited a zero-day in a signed Kontron driver to disable endpoint defenses via BYOVD, gaining kernel-level access to terminate security processes before deploying ransomware. CVE-2026-46242 (Bad Epoll) now has a public proof-of-concept for a Linux kernel use-after-free that enables privilege escalation on 6.4+ kernels with 99% reliability. Medtronic is notifying 3.8 million individuals after a ShinyHunters data breach exposed personal and medical data. Multiple new red-team tools and offensive-security frameworks including T3MP3ST, goshs, and Knossos were released, alongside DOJ filings revealing how Microsoft telemetry helped the FBI identify alleged Scattered Spider member Peter Stokes via Windows Global Device ID correlation.

July 1, 2026

CitrixBleed Returns: watchTowr Discloses a New NetScaler Pre-Auth Memory Overread

watchTowr Labs disclosed CVE-2026-8451, a pre-auth memory overread in Citrix NetScaler SAML handling that extends the CitrixBleed lineage, alongside five other patched flaws. A China-linked USB implant infected Japanese military networks for nearly a year via disaster-relief supply chains, while European defense targets faced spear-phishing campaigns abusing AWS Cognito for credential-less C2 infrastructure. Multiple AI agent safety bypasses emerged, including GuardFall (shell injection against coding agents), BioShocking (prompt injection stealing credentials), and poisoned MCP tool descriptions enabling data exfiltration without raising alerts.

June 22, 2026

  • usbliter8, a novel BootROM/SecureROM exploit for Apple A12/A13 chips (iPhone XS, iPhone 11, Apple Watch 4/5, HomePod mini), was disclosed with a public PoC — the first unpatchable hardware-level iPhone exploit in six years. It chains a USB-controller hardware bug with a firmware configuration flaw to achieve application-processor boot-chain compromise; physical access plus a Raspberry Pi are required, and there is no software fix. Paradigm Shift writeup, PoC, CyberInsider. · Offensive & Red Team

in Unpatchable iPhone BootROM Exploit Drops as a New Call-Stack Bypass Defeats 2024-Era EDR

June 21, 2026

FortiBleed Exposes 86,000 FortiGate Devices as North Korea's Sapphire Sleet Poisons the Mastra npm Catalog

Fortinet networks face massive credential exposure via FortiBleed affecting 86,644 devices, while North Korea's Sapphire Sleet compromised 145 Mastra npm packages with an infostealer, and Google Cloud Vertex AI SDK suffered a cross-tenant RCE vulnerability. Critical CVEs in Splunk, NGINX, Cisco SD-WAN, and Joomla are under active exploitation, alongside emerging AI-focused attacks including AutoJack and malicious JetBrains plugins stealing API keys.