Security researchers have published a new unpatchable SecureROM exploit for Apple's A12 and A13 chips, extending public BootROM exploitation beyond the devices affected by checkm8. Security firm Paradigm Shift disclosed the unpatched exploit, called usbliter8, on June 18. …
Security researchers have admitted that Anthropic& 039;s Mythos AI model has been able to hack macOS, bypassing Apple& 039;s security systems in a way never previously achieved. …
… Heightened security If AI is helping create hacking tools faster and in great volumes than before, then there's no option. Apple has to patch every vulnerability as it's found, and it has to release those security updates as quickly as possible. …
… Paradigm Shift, as reported by MacRumors , said it informed Apple Product Security before publishing on June 18. The order doesn't prevent Apple from using information it already has to mitigate the vulnerability. …
… Apple& 039;s latest security advisory comes after two malware campaigns that targeted iPhone users. …
… Timeline of DarkSword observations and vulnerability patches. Image credit: Google Apple& 039;s security notes for iOS 26.3 say the dyld vulnerability may have been used in highly targeted attacks. …
… "Keeping your software up to date is the single most important thing you can do to maintain the security of your Apple products," said Apple spokesperson Sarah O& 039;Rourke, adding that Lockdown Mode was also effective against DarkSword. …
… In some cases, Mythos discovered vulnerabilities that apparently "survived decades of human review and millions of automated security tests." One highlight issue was a 27-year-old vulnerability in OpenBSD, which is often used in firewalls and critical infrastructure. …
… As of the research publication, there& 039;s no evidence of active exploitation in the wild, so the vulnerability is still theoretical. …
… Apple confirmed that it fixed one reported AirDrop vulnerability and assigned it a CVE identifier, though it hasn't yet published the corresponding security advisory or disclosed the CVE number. …