3 articles
Apple's September 28, 2026 point releases patch CVE-2026-86950, a CoreGraphics out-of-bounds write that may have been exploited in a highly targeted attack. Install iOS/iPadOS 26.7.1, macOS Tahoe 26.7.1, or Sequoia 15.8.1.
Ars Technica reports a Muse macOS zero-day that lets local apps or a ClickFix-style terminal paste hijack the assistant account. Plain advice for home Mac users: uninstall or wait for a Meta patch.
Google's September 2026 Pixel Update Bulletin flags CVE-2026-58704, a High modem elevation-of-privilege issue with limited targeted exploitation. Install the update and confirm security patch level 2026-09-05.
