Apple fixes zero-day flaw used in 'extremely sophisticated' attacks
ID: 5a9c61e6-7551-5515-8edb-1611f67bc57a
STIX ID: report--5a9c61e6-7551-5515-8edb-1611f67bc57a
Feed Name: Bleeping Computer
Apple released security updates for a zero-day arbitrary code execution vulnerability in dyld (CVE-2026-20700) that was reportedly exploited in "extremely sophisticated" targeted attacks affecting iOS, iPadOS, macOS (Tahoe), tvOS, watchOS, and visionOS. Affected device classes include iPhone 11 and later, several iPad generations, and Macs on macOS Tahoe; Apple patched the issue in iOS/iPadOS 18.7.5 and macOS Tahoe 26.3, and credited Google’s Threat Analysis Group with discovery, but provided no exploitation details or indicators of compromise.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.