Loading story…
dCERT issued advisories for multiple vulnerabilities in Apple iOS, identifying separate batches of security flaws affecting the mobile operating system. The advisories, tracked as 2025-2302 and 2026-0841, indicate that Apple iOS remained affected by more than one vulnerability set requiring security attention.
While technical details were not included in the referenced notices, the advisories signal that organizations using Apple iPhones and iPads should review the affected iOS versions, assess exposure across managed devices, and prioritize vendor patches or mitigations associated with the listed advisories. Repeated advisory publication also suggests ongoing vulnerability management needs for enterprise mobile fleets running iOS.
See affected versions and whether adversaries are exploiting it.
2 events from the most recent confirmed update back to the earliest known activity.
dCERT issued advisory 2026-0841 covering multiple vulnerabilities affecting Apple iOS. The reference does not provide further details on the flaws, impact, or fixes.
dCERT issued advisory 2025-2302 covering multiple vulnerabilities affecting Apple iOS. No additional technical details or remediation information are provided in the reference.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
dCERT published multiple advisories covering **Apple macOS** and **Apple Safari**, warning of several vulnerabilities affecting desktop operating systems and the browser stack. The notices include a general macOS advisory, a Safari advisory, and a separate bulletin for **macOS Sequoia, Sonoma, and Ventura**, indicating that multiple supported Apple platforms are affected. The advisories suggest organizations should review Apple security updates for impacted systems and prioritize patching across **macOS** endpoints and **Safari** installations. For defenders, the overlap between operating system and browser advisories raises the risk of compromise through user-facing applications and core platform components, making timely remediation and version validation important across managed Apple fleets.
Jun 29, 2026
Multiple vendors published **security advisories** covering unrelated vulnerabilities across enterprise, mobile, and industrial products. The notices include **ABB** flaws affecting *AWIN GW100 rev.2*, *AWIN GW120*, and *AC500 V3* industrial control products, with issues including embedded webserver vulnerabilities tracked as `CVE-2025-13777`, `CVE-2025-13778`, `CVE-2025-13779`, and a stack buffer overflow in Cryptographic Message Syntax tracked as `CVE-2025-15467`. Other advisories cover **HPE Compute Scale-up Server 3200** systems prior to `v1.70.74` for an Intel firmware local privilege escalation issue tied to `INTEL-SA-01396`, **GitHub Enterprise Server** versions across the `3.14.x` to `3.19.x` branches, and **Splunk Enterprise**, **Splunk Cloud Platform**, and multiple *Splunk AppDynamics* components. **Apple** also released security updates for older supported mobile operating system branches, including **iOS** and **iPadOS** versions prior to `16.7.15` and `15.8.7`. Separately, a post highlighting **iPhone** and **iPad** approval for handling information up to the **NATO Restricted** level is not part of the same event stream and is primarily a certification/announcement item rather than a vulnerability disclosure or incident report. Taken together, the material reflects a routine set of unrelated vendor advisories rather than a single coherent cybersecurity incident or disclosure campaign.
Jun 29, 2026
Apple published security advisories detailing vulnerability fixes across multiple iOS and iPadOS versions, including iOS/iPadOS **16.7**, **17.2**, **18.1**, **18.3**, **26.1**, and **26.2**. The advisories describe a range of impacts such as sandbox escapes (including Web Content sandbox breakout), privacy issues where apps could access or expose sensitive user data via insufficient log redaction, file-system modification via temporary-file handling, and memory-safety flaws (e.g., out-of-bounds reads, type confusion, and bounds-checking issues) that could lead to crashes or memory corruption. Apple attributes fixes to changes like improved protocol handling, cache handling, input validation, and additional permission restrictions, and references issues by **CVE** where available. Several advisories also highlight device-state and authentication/logic weaknesses: iOS/iPadOS 18.3 includes a case where an attacker with physical access to an **unlocked** device could access Photos while the app is locked (`CVE-2025-24141`), while iOS/iPadOS 18.1 includes a lock-screen exposure issue (`CVE-2024-44274`) and a Shortcuts-related path-handling flaw that could allow arbitrary shortcut execution without user consent (`CVE-2024-44255`). The iOS/iPadOS 26.x advisories include privacy and permission issues (e.g., identifying installed apps, screenshots of sensitive embedded views), potential kernel memory corruption/system termination conditions, and logic/UI issues affecting security posture (e.g., passcode requirement timing after Face ID enrollment restore scenarios and potential FaceTime caller ID spoofing), with multiple findings credited to external researchers and teams (including Google Project Zero, ByteDance IES Red Team, and others).
Jun 29, 2026