🚨 GoPlus Security Alert
At Hexacon 2026, researchers demoed 4 bugs against Apple iOS / iPadOS / macOS ( blog.calif.io/ | Hanami
🚨 GoPlus Security Alert
At Hexacon 2026, researchers demoed 4 bugs against Apple iOS / iPadOS / macOS ( blog.calif.io/p/iphone ). One-click: open a malicious PDF in iMessage or Signal and it can run code, then exfil local messages to a remote server. Appears tied to CoreGraphics CVE-2026-86950.
Affected:
iOS / iPadOS < 26.7.1
macOS Tahoe < 26.7.1
Sequoia < 15.8.1
Apple shipped emergency updates 26.7.1 / 15.8.1 on Sept 28: support.apple.com/en-us/149226
⚠️ Do not open any suspicious PDF. Update iPhone, iPad, and Mac now, and stay on the latest OS.