ios
2 live · 3 on record · last incident 4 days ago
Live2
- liveiOS worse_query: iOS Sandbox Escape Published Without Vendor Fix
Research · since 8 Nov 2026
An iOS sandbox escape called worse_query was published on GitHub, allowing malicious apps to read other applications files on supported versions. Binance warned that this flaw exposes sensitive wallet keys and login credentials, and no vendor fix has been confirmed yet.
Do:Monitor for Apple security updates addressing the sandbox escape.
- liveiOS APT29 Conducts Watering Hole Campaign Against iOS and Android Users
Breaches & attacks · Exploited · since 15 Oct 2026 · updated 5 Nov 2026
APT29 used compromised websites, lookalike domains and a hijacked web analytics service to target iOS and Android users with n-day exploits. The campaign stole cookies, messages and Wi-Fi passwords from targeted mobile devices.
Earlier1
- closedPadre Terminal Fake crypto app Padre Terminal on Apple App Store steals $23K
Breaches & attacks · Real loss · since 29 Oct 2026