Apple squashes zero-day bug exploited in “extremely sophisticated” attack (CVE-2026-86950)

Reported by Help Net Security (Zeljka Zorz)

Summary by Cyber Security News29 Sep 2026, 11:50 CEST

About this summary. This is a short, independently written summary of an article first published by Help Net Security. Cyber Security News did not report or verify the underlying story. Read the original: https://www.helpnetsecurity.com/2026/09/29/apple-core-graphics-zero-day-cve-2026-86950-fixed/

Apple has shipped iOS and macOS security updates to fix an actively exploited zero-day vulnerability (CVE-2026-86950) in the operating systems’ Core Graphics framework. “Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27,” the company said, but refrained from providing additional details about the attacks or targets.

Read the full article at Help Net Security →