Apple Warns iPhone Users of Sophisticated Cyber Attack Targeting Specific Individuals
The tech giant has released security updates to address vulnerabilities that could allow attackers to exploit devices through malicious files.
Apple has issued an urgent warning to some iPhone users about a security flaw that may have been exploited in an "extremely sophisticated attack." The vulnerability, tracked as CVE-2026-86950, could allow attackers to execute malicious code on a device by tricking it into processing a specially crafted file.
This flaw concerns CoreGraphics, the software responsible for processing and displaying visual content on Apple devices. The vulnerability allows information to be written outside of its intended memory area, potentially enabling an attacker's code to run. Apple stated that the issue "may have been exploited in an extremely sophisticated attack against specific targeted individuals" on versions of iOS prior to iOS 27. The company credited Meta Product Security for reporting the vulnerability and indicated it has been fixed by improving memory boundary checks.
Security researchers have demonstrated that a PDF containing a specially crafted font could trigger memory corruption, with some analysis suggesting a possible connection to WhatsApp. However, the exact delivery method of the attacks has not been confirmed, and Apple's advisory does not specify if this flaw alone grants complete control of a device.
In addition to this primary vulnerability, Apple's latest update, iOS 27.2.11 (for iPhone XS, XS Max, and XR, as well as the seventh-generation iPad), also addresses two other separate security flaws. One could allow a malicious app to access the device's camera without user permission, and another could permit an app to expose sensitive personal information. No exploitation warning has been attached to these latter two issues.
Apple recommends that affected users update their devices immediately. To do so, users should navigate to Settings, then General, and tap Software Update to download and install the latest available iOS version. The company advises backing up iPhones using iCloud or a computer before installing the update, ensuring the device is plugged into power and connected to Wi-Fi.
For users who may not have sufficient storage space, Apple's update process offers to temporarily remove apps to free up room, with apps being automatically reinstalled afterward. Users who cannot perform a wireless update can follow Apple's instructions for updating via a computer. To ensure future protection, Apple recommends enabling Automatic Updates in the Software Update settings, allowing installations to occur overnight while the device is charging and connected to Wi-Fi.