Friday, November 6, 2026

Apple

Apple Private Cloud Compute Path Traversal Flaw Lets Attackers Write Files as Root

Security researcher Drinor Selmanaj has disclosed a path traversal vulnerability (CVE-2026-20685) in Apple's Private Cloud Compute (PCC) that allows a privileged network attacker to...

macOS CUPS Flaw Lets Local Attackers Write Arbitrary Files as Root

A recently disclosed privilege-related vulnerability in the Common UNIX Printing System (CUPS) on macOS could allow an unprivileged local user to create attacker-controlled files...

Apple Removes Telegram From App Store Worldwide

Telegram Messenger was temporarily removed from Apple's App Store in several countries late Monday, preventing new users from downloading the messaging platform and blocking...

Apple iOS 26.6 Update Fixes Flaws Allowing Kernel-Level Code Execution and Root Access

Apple has released iOS 26.6 and iPadOS 26.6, a significant security update that addresses numerous vulnerabilities across core operating system components, media frameworks, WebKit,...

Apple Biome Data Reveals Safari Activity, Wallet Transactions and Location Visits

Apple’s internal Biome framework is rapidly emerging as one of the most valuable sources of forensic intelligence on iOS, with newly analyzed data revealing...

Apple Fixes Hide My Email Vulnerability That Exposed Users’ Real Email Addresses

Apple has addressed a year-old vulnerability in its "Hide My Email" privacy feature, which could expose users' real email addresses. This incident has already...

Apple Hide My Email Vulnerability Lets Attackers Reveal Users’ Real Email Addresses

Apple's Hide My Email privacy feature currently faces a significant flaw that may expose users' real email addresses, compromising one of iCloud+'s core anonymity...

282 iOS Apps Found Leaking LLM API Credentials in Network Traffic

Researchers have uncovered a systemic LLM credential exposure problem in the iOS ecosystem, with 282 AI‑powered apps leaking exploitable API credentials and backend access...