Cybersecurity articles tagged #iOS on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/apple-patches-ios-ipados-18-and-macos-108-vulnerabilities-addressedhttps://runtimerebel.com/blog/apple-patches-ios-ipados-18-and-macos-108-vulnerabilities-addressedApple has released significant security updates for iOS/iPadOS 18 and macOS, fixing 108 vulnerabilities, none exploited in the wild.Tue, 18 Aug 2026 00:42:55 GMTAppleiOSiPadOSmacOSWebKithttps://runtimerebel.com/blog/apple-july-2026-security-updates-patching-macos-26-and-safarihttps://runtimerebel.com/blog/apple-july-2026-security-updates-patching-macos-26-and-safariApple releases widespread security updates for macOS 26, legacy macOS 14 and 15, iOS, and Safari. Organizations must patch to mitigate remote execution risks.Wed, 29 Jul 2026 10:43:22 GMTApplemacOSSafariiOSSecurity UpdatesPatch Managementhttps://runtimerebel.com/blog/june-apple-security-updates-for-ios-macos-safari-patch-nowhttps://runtimerebel.com/blog/june-apple-security-updates-for-ios-macos-safari-patch-nowApple released essential security updates for iOS/iPadOS, macOS, and Safari in June. Learn why timely patching is critical for protecting your devices and data.Tue, 30 Jun 2026 12:52:07 GMTAppleiOSiPadOSmacOSSafariSecurity UpdatesPatch Managementhttps://runtimerebel.com/blog/airdrop-and-quick-share-proximity-flaws-cause-crashes-and-bypass-checkshttps://runtimerebel.com/blog/airdrop-and-quick-share-proximity-flaws-cause-crashes-and-bypass-checksResearchers found six security flaws in AirDrop and Quick Share, enabling nearby attackers to crash devices and bypass security checks without user interaction.Tue, 30 Jun 2026 12:49:12 GMTAirDropQuick SharemacOSiOSAndroidWireless SecurityProximity AttackDenial of ServicePrivacy Bypasshttps://runtimerebel.com/blog/apple-a-series-bootrom-bypass-usbliter8-exploit-technical-analysishttps://runtimerebel.com/blog/apple-a-series-bootrom-bypass-usbliter8-exploit-technical-analysisTechnical breakdown of the Usbliter8 exploit affecting millions of iPhones. Learn why this hardware-level BootROM vulnerability cannot be patched.Mon, 22 Jun 2026 10:15:24 GMTUsbliter8AppleiOSBootROMHardware SecurityiPhone Exploithttps://runtimerebel.com/blog/apple-macos-sonoma-14-5-and-ios-17-5-patch-technical-analysishttps://runtimerebel.com/blog/apple-macos-sonoma-14-5-and-ios-17-5-patch-technical-analysisApple addresses critical security flaws in macOS and iOS, including kernel-level RCE and a privacy bug causing deleted media to reappear on devices.Tue, 12 May 2026 12:49:41 GMTApplemacOSiOSCVE-2024-27822Kernel Securityhttps://runtimerebel.com/blog/apple-may-2024-security-updates-address-84-vulnerabilitieshttps://runtimerebel.com/blog/apple-may-2024-security-updates-address-84-vulnerabilitiesApple's May 2024 security updates patch 84 vulnerabilities across iOS, macOS, watchOS, tvOS, and visionOS. Immediate patching is crucial for all users.Tue, 12 May 2026 00:50:06 GMTAppleiOSmacOSiPadOSwatchOStvOSvisionOSSecurity UpdateVulnerabilitieshttps://runtimerebel.com/blog/darksword-analyzing-the-gtig-ios-full-chain-zero-day-exploithttps://runtimerebel.com/blog/darksword-analyzing-the-gtig-ios-full-chain-zero-day-exploitGoogle Threat Intelligence Group uncovers DarkSword, a sophisticated iOS exploit chain leveraging multiple zero-days for state-sponsored surveillance.Tue, 05 May 2026 12:39:04 GMTDarkSwordiOSGTIGSpywareState Sponsoredhttps://runtimerebel.com/blog/microsoft-outlook-ios-authentication-issues-remediation-and-riskshttps://runtimerebel.com/blog/microsoft-outlook-ios-authentication-issues-remediation-and-risksMicrosoft resolves global Outlook.com outage but requires iOS Mail app users to re-authenticate. Learn how to secure accounts and mitigate phishing risks.Tue, 28 Apr 2026 08:57:14 GMTOutlookiOSMicrosoft 365PhishingIdentity Managementhttps://runtimerebel.com/blog/cve-2024-23296-apple-patches-actively-exploited-notification-flawhttps://runtimerebel.com/blog/cve-2024-23296-apple-patches-actively-exploited-notification-flawApple releases urgent security updates for iOS and iPadOS to address CVE-2024-23296, a memory corruption vulnerability in Notification Services seeing active use.Thu, 23 Apr 2026 12:32:23 GMTCVE-2024-23296AppleiOSiPadOSZero-DayNotification Serviceshttps://runtimerebel.com/blog/cve-2026-28950-apple-fixes-ios-notification-data-retention-flawhttps://runtimerebel.com/blog/cve-2026-28950-apple-fixes-ios-notification-data-retention-flawApple patches CVE-2026-28950 in iOS and iPadOS, a logging issue that allowed deleted notifications to persist on devices, impacting forensic privacy.Thu, 23 Apr 2026 08:42:51 GMTCVE-2026-28950AppleiOSSignalForensicsData Privacyhttps://runtimerebel.com/blog/ios-17-5-1-notification-data-retention-bug-mitigation-guidehttps://runtimerebel.com/blog/ios-17-5-1-notification-data-retention-bug-mitigation-guideApple releases iOS 17.5.1 to address a Notification Services flaw where deleted data persisted on devices due to database corruption issues.Thu, 23 Apr 2026 00:46:36 GMTAppleiOSiPadOSData PersistencePrivacyhttps://runtimerebel.com/blog/malicious-crypto-wallets-infiltrate-china-s-apple-app-storehttps://runtimerebel.com/blog/malicious-crypto-wallets-infiltrate-china-s-apple-app-store26 fake cryptocurrency wallet apps infiltrated China's Apple App Store, impersonating popular brands to steal seed phrases and drain user funds.Tue, 21 Apr 2026 00:45:03 GMTCryptocurrencyMalwareiOSApple App StoreWalletSeed Phrase TheftChinaSupply Chain Attackhttps://runtimerebel.com/blog/sparkcat-mobile-malware-variant-steals-crypto-recovery-phraseshttps://runtimerebel.com/blog/sparkcat-mobile-malware-variant-steals-crypto-recovery-phrasesA new SparkCat malware variant targets iOS and Android users, stealing crypto wallet recovery phrase images from compromised apps on official stores.Fri, 03 Apr 2026 12:21:17 GMTSparkCatMobile MalwareiOSAndroidCryptocurrency TheftApp Store MalwareRecovery Phrase Thefthttps://runtimerebel.com/blog/apple-darksword-protection-expands-mitigating-cve-2023-38604-zero-click-exploitshttps://runtimerebel.com/blog/apple-darksword-protection-expands-mitigating-cve-2023-38604-zero-click-exploitsApple expands DarkSword exploit protection to all users, enhancing defenses against state-sponsored and commercial zero-click attacks like CVE-2023-38604.Thu, 02 Apr 2026 16:27:21 GMTAppleDarkSwordCVE-2023-38604Zero ClickExploit KitState SponsoredCommercial SpywareiOSmacOSiPadOSwatchOStvOShttps://runtimerebel.com/blog/coruna-sophisticated-iphone-hacking-toolkit-bypasses-ios-defenseshttps://runtimerebel.com/blog/coruna-sophisticated-iphone-hacking-toolkit-bypasses-ios-defensesGoogle researchers uncovered "Coruna," a powerful iOS exploit kit leveraging 23 vulnerabilities to silently install malware on iPhones, likely state-sponsored.Thu, 02 Apr 2026 12:30:01 GMTCorunaiOSiPhoneExploit KitState SponsoredMobile Securityhttps://runtimerebel.com/blog/ios-18-7-7-update-expanded-to-mitigate-darksword-exploit-kit-riskshttps://runtimerebel.com/blog/ios-18-7-7-update-expanded-to-mitigate-darksword-exploit-kit-risksApple expands iOS 18.7.7 and iPadOS 18.7.7 availability to additional devices to mitigate risks from the recently disclosed DarkSword exploit kit.Thu, 02 Apr 2026 08:27:29 GMTAppleiOSDarkSwordExploit KitMobile Securityhttps://runtimerebel.com/blog/star-blizzard-apt28-adopts-darksword-ios-exploit-kithttps://runtimerebel.com/blog/star-blizzard-apt28-adopts-darksword-ios-exploit-kitRussian APT Star Blizzard (APT28) now uses the DarkSword iOS exploit kit to target government, finance, and academia, increasing mobile threat exposure.Mon, 30 Mar 2026 12:35:23 GMTStar BlizzardAPT28Fancy BearNobeliumDarkSwordiOSExploit KitState SponsoredMobile SecuritySpear Phishinghttps://runtimerebel.com/blog/apple-ios-lock-screen-alerts-warn-of-active-web-based-exploitshttps://runtimerebel.com/blog/apple-ios-lock-screen-alerts-warn-of-active-web-based-exploitsApple is now issuing direct Lock Screen notifications to warn users on outdated iOS versions about active web-based attacks and the need for urgent updates.Fri, 27 Mar 2026 20:14:32 GMTAppleiOSiPadOSWeb Based AttacksMobile SecurityPatch Managementhttps://runtimerebel.com/blog/apple-addresses-85-vulnerabilities-in-recent-os-updateshttps://runtimerebel.com/blog/apple-addresses-85-vulnerabilities-in-recent-os-updatesApple released significant security updates patching 85 vulnerabilities across macOS, iOS, iPadOS, tvOS, watchOS, and visionOS, with no active exploitation reported.Thu, 26 Mar 2026 00:41:00 GMTApplemacOSiOSiPadOStvOSwatchOSvisionOSSecurity UpdateVulnerabilitiesPatch Managementhttps://runtimerebel.com/blog/apple-warns-of-coruna-and-darksword-exploit-kits-targeting-ioshttps://runtimerebel.com/blog/apple-warns-of-coruna-and-darksword-exploit-kits-targeting-iosApple warns of Coruna and DarkSword exploit kits targeting older iOS versions via malicious web content to steal sensitive data. Update your devices now.Fri, 20 Mar 2026 08:17:32 GMTAppleiOSCorunaDarkSwordExploit KitData Thefthttps://runtimerebel.com/blog/darksword-iphone-exploit-kit-zero-day-attacks-on-ios-usershttps://runtimerebel.com/blog/darksword-iphone-exploit-kit-zero-day-attacks-on-ios-usersDarkSword, an advanced iPhone exploit kit, leverages multiple zero-day vulnerabilities to target users in Saudi Arabia, Turkey, Malaysia, and Ukraine for espionage and…Thu, 19 Mar 2026 00:37:39 GMTDarkSwordiOSiPhoneZero-DayExploit KitNation StateCybercrimeEspionageTurkeySaudi ArabiaMalaysiaUkrainehttps://runtimerebel.com/blog/darksword-ios-exploit-kit-analysis-of-state-sponsored-spyware-chainshttps://runtimerebel.com/blog/darksword-ios-exploit-kit-analysis-of-state-sponsored-spyware-chainsAnalysis of the DarkSword exploit kit targeting six iOS vulnerabilities for state-sponsored surveillance and full device compromise via WebKit exploits.Wed, 18 Mar 2026 16:30:05 GMTDarkSwordiOSSpywareExploit KitIntellexaZero-Dayhttps://runtimerebel.com/blog/cve-2026-20643-apple-patches-webkit-same-origin-policy-bypasshttps://runtimerebel.com/blog/cve-2026-20643-apple-patches-webkit-same-origin-policy-bypassApple addresses CVE-2026-20643, a critical WebKit Navigation API flaw allowing Same-Origin Policy bypass on iOS and macOS. Deploy updates immediately.Wed, 18 Mar 2026 08:20:23 GMTAppleWebKitCVE-2026-20643iOSmacOSSOP Bypasshttps://runtimerebel.com/blog/apple-cve-2026-20643-webkit-flaw-fixed-via-background-updatehttps://runtimerebel.com/blog/apple-cve-2026-20643-webkit-flaw-fixed-via-background-updateApple deploys the first Background Security Improvements update to address a critical WebKit vulnerability (CVE-2026-20643) across iOS and macOS platforms.Wed, 18 Mar 2026 04:44:24 GMTAppleWebKitCVE-2026-20643iOSmacOSPatch Managementhttps://runtimerebel.com/blog/apple-iphone-and-ipad-nato-restricted-compliance-certificationhttps://runtimerebel.com/blog/apple-iphone-and-ipad-nato-restricted-compliance-certificationApple iPhone and iPad devices achieve NATO Restricted classification approval, allowing secure government use without specialized software or hardware mods.Thu, 12 Mar 2026 20:15:13 GMTAppleiOSiPadOSNATOInformation AssuranceGovernment Securityhttps://runtimerebel.com/blog/apple-patches-cve-2023-43010-webkit-vulnerability-in-older-deviceshttps://runtimerebel.com/blog/apple-patches-cve-2023-43010-webkit-vulnerability-in-older-devicesApple backports fixes for CVE-2023-43010 in older iOS and macOS versions to defend against the Coruna exploit kit targeting WebKit memory corruption.Thu, 12 Mar 2026 12:17:21 GMTCVE-2023-43010AppleiOSmacOSWebKitCoruna Exploit Kithttps://runtimerebel.com/blog/qualcomm-0-day-and-ios-exploit-chains-impact-mitigation-strategieshttps://runtimerebel.com/blog/qualcomm-0-day-and-ios-exploit-chains-impact-mitigation-strategiesThis weekly recap details active exploitation of a Qualcomm zero-day, iOS exploit chains, and emerging 'AirSnitch' attack methods. Learn what defenders should prioritize.Mon, 09 Mar 2026 16:32:02 GMTQualcommiOSZero-DayExploit ChainAirsnitchVibe Coded MalwareMobile Securityhttps://runtimerebel.com/blog/apple-ios-cve-2023-41993-patching-exploited-spyware-vulnerabilitieshttps://runtimerebel.com/blog/apple-ios-cve-2023-41993-patching-exploited-spyware-vulnerabilitiesCISA warns of three Apple iOS vulnerabilities, including CVE-2023-41993, exploited in mercenary spyware and cryptocurrency theft attacks. Patch immediately.Fri, 06 Mar 2026 16:18:14 GMTCVE-2023-41991CVE-2023-41992CVE-2023-41993AppleiOSCISA KEVhttps://runtimerebel.com/blog/coruna-ios-exploit-kit-spyware-grade-threat-targets-cryptohttps://runtimerebel.com/blog/coruna-ios-exploit-kit-spyware-grade-threat-targets-cryptoThe sophisticated Coruna iOS exploit kit, leveraging 23 undocumented vulnerabilities, is now deployed in targeted espionage and crypto theft attacks.Wed, 04 Mar 2026 20:15:16 GMTCorunaiOSExploit KitMobile SecurityCrypto TheftEspionageZero-Dayhttps://runtimerebel.com/blog/coruna-ios-exploit-kit-targets-ios-13-17-2-1-with-23-exploitshttps://runtimerebel.com/blog/coruna-ios-exploit-kit-targets-ios-13-17-2-1-with-23-exploitsGoogle's GTIG identified Coruna (CryptoWaters), a powerful iOS exploit kit leveraging 23 exploits across 5 chains to target iOS 13.0-17.2.1. Update immediately.Wed, 04 Mar 2026 20:14:11 GMTCorunaCryptoWatersiOSExploit KitiPhoneGoogle GTIGhttps://runtimerebel.com/blog/coruna-exploit-kit-ios-13-17-2-1-targeted-by-multiple-aptshttps://runtimerebel.com/blog/coruna-exploit-kit-ios-13-17-2-1-targeted-by-multiple-aptsGoogle Threat Intelligence Group details Coruna, a powerful iOS exploit kit targeting versions 13.0 to 17.2.1, used by commercial vendors and nation-state actors for…Tue, 03 Mar 2026 16:26:20 GMTCorunaiOSExploit KitWebKit RCEAPTUNC6353UNC6691Commercial SurveillanceZero-DayCVE-2024-23222CVE-2022-48503CVE-2023-43000CVE-2021-30952CVE-2023-32409CVE-2020-27932CVE-2020-27950CVE-2023-32434CVE-2023-41974CVE-2023-38606CVE-2024-23225CVE-2024-23296https://runtimerebel.com/blog/nato-approves-apple-iphone-and-ipad-for-classified-communicationshttps://runtimerebel.com/blog/nato-approves-apple-iphone-and-ipad-for-classified-communicationsApple iOS and iPadOS devices added to NATO’s NIAPC, authorizing their use for handling NATO Restricted level classified information and communications.Thu, 26 Feb 2026 20:15:44 GMTNATOAppleiOSiPadOSNIAPCMobile SecurityClassified Informationhttps://runtimerebel.com/blog/predator-spyware-hooking-ios-springboard-to-suppress-privacy-indicatorshttps://runtimerebel.com/blog/predator-spyware-hooking-ios-springboard-to-suppress-privacy-indicatorsAn analysis of Intellexa's Predator spyware capabilities regarding the manipulation of iOS SpringBoard to suppress privacy indicators during unauthorized audio and…Mon, 23 Feb 2026 05:32:50 GMTPredatorIntellexaiOSSpywareSpringBoard