Apple 0-Day Flaw Actively Exploited in Targeted Cyberattacks on Individuals

Apple has released emergency security updates for iOS and iPadOS to fix a critical “zero-day” vulnerability that hackers are actively using in attacks.

The flaw, tracked as CVE-2026-20700, was discovered by Google’s Threat Analysis Group and is described by Apple as being part of “extremely sophisticated” cyberattacks targeting specific individuals.

The Critical Flaw: CVE-2026-20700

The vulnerability exists in a core component of the operating system called dyld (Dynamic Link Editor).

This component is responsible for loading programs and libraries when you open an app.​

• What went wrong: The issue is a “memory corruption” bug. In simple terms, the system fails to manage its memory usage correctly, creating a loophole.
• The danger: An attacker who knows how to exploit this loophole can perform “arbitrary code execution.” This means they can run their own malicious commands on your iPhone or iPad, potentially installing spyware or stealing data without your permission.

Apple rarely shares details about active attacks, but they confirmed that this specific bug might have been used against high-profile targets.​

The company noted that this new flaw is linked to two other vulnerabilities (CVE-2025-14174 and CVE-2025-43529) that were fixed in previous updates.

Security researchers believe attackers are “chaining” these bugs together using one flaw to break into the browser and this new dyld flaw to take full control of the device.

The vulnerability affects a wide range of Apple devices. You are at risk if you use:

• iPhone: iPhone 11 and later models.​
• iPad: iPad Pro (all models from 2018 onwards), iPad Air (3rd gen+), and iPad mini (5th gen+).​

While the zero-day is the most urgent fix, the iOS 26.3 update also patches several other dangerous bugs:​

• Bluetooth & Wi-Fi: Fixes that prevent hackers near you from crashing your phone or intercepting traffic.
• Photos & Contacts: Fixes flaws that could let someone with your locked phone see sensitive user information or photos.
• Kernel: Patches that prevent malicious apps from gaining “root” (admin) privileges.

Because hackers are already using this flaw, it is critical to update immediately.

Go to Settings > General > Software Update on your device and download iOS 26.3 or iPadOS 26.3.​

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google