Apple patches decade-old iOS zero-day exploited in the wild
A dyld zero-day (CVE-2026-20700) enables arbitrary code execution with memory-write capability and was exploited in targeted, highly sophisticated attacks.
New iOS and iPadOS Flaws Leave Millions of iPhones at Risk
Two WebKit vulnerabilities (CVE-2025-43529 and CVE-2025-14174) allow zero-click remote code execution in Safari, potentially giving attackers full access to iPhones and iPads.
Apple Issues Security Updates After Two WebKit Flaws Found Exploited in the Wild
Apple released security updates across platforms to patch two WebKit vulnerabilities exploited in the wild, one matching a Chrome ANGLE/Metal out-of-bounds flaw.
Safari Technology Preview Release 227 adds accessibility improvements, animation persistence and bug fixes, and multiple new CSS features for macOS Tahoe and Sequoia.