grep -rl "ios" ./articles
iVerify found a new variant of the DarkSword iOS chain that steals keychain contents and cryptocurrency wallet data. The original was documented in March as targeted tooling. This one is delivered by malicious ads to whoever visits the page.
CVE-2026-86950 is an out-of-bounds write in CoreGraphics font rendering, reported by Meta and patched after what Apple calls an extremely sophisticated attack on specific individuals. A public proof of concept has since appeared: a PDF with a crafted font that reliably corrupts memory on anything not updated.
Citizen Lab and the SHARE Foundation confirmed an iMessage zero-click delivered Pegasus to a member of Serbia's student protest movement between December 2025 and January 2026. Apple fixed the flaw in iOS 18.4.1, in April 2025. The tool is identified; the operator is not.
Socket found Composer themes on Packagist that inject JavaScript into Vietnamese streaming sites and run a WebKit-to-kernel chain on visiting iPhones, taking keychains, SMS databases and crypto wallet seeds. The campaign targets iOS 18.4 to 18.6.x. Every vulnerability it uses has a fix.