Apple Patches Exploited Brotli Flaw in Out-of-Band Update
Apple’s 9 November updates fix an exploited Brotli flaw and close iMessage and device-pairing vulnerabilities. Check which version to install.
Apple
The Phone Was Stolen. An AI Voice Agent Asked the Owner to Unlock It.
AnonyMousKIT combines stolen-device data, phishing pages and low-cost AI voice agents to obtain the credentials needed to disable Activation Lock.
Apple Pulled iOS 27 Security Fixes Back Into iOS 26. AI Is Compressing the Patch Window.
Apple has moved fixes from next-generation betas into current systems. AI is shrinking the time enterprises have to test, approve and deploy patches.
The Browser Session Wasn’t Stolen. The Attacker Drove It From Inside the Mac.
AmnesiaStealer clones an authenticated Chromium profile, launches it in a hidden process and gives a remote operator live control from inside the infected Mac.
Apple Patched Screen Sharing. Internet-Exposed Macs Were Already Being Hunted.
Apple patched CVE-2026-65400, but attackers were already exploiting internet-exposed macOS Screen Sharing services. The reported compromises reached root and installed Monero miners, turning a patching story into an attack-surface and incident-response problem.
The Exploit Was Unpatchable. A Court Order Took the Original Research Offline.
The usbliter8 exploit exposed an immutable Apple SecureROM flaw. A court order removed the original research, but it could not remove the vulnerability or copies already distributed.
Apple Moved Private Cloud Compute Onto Google’s Hardware. The Trust Model Had to Move With It.
Apple extended Private Cloud Compute onto Google Cloud and NVIDIA hardware, turning attestation, independent roots of trust and public verification into the privacy boundary.