Section

Security & Privacy

Security fixes, exploits in the wild, scams aimed at Apple users, and the privacy settings worth changing. Each report names the affected versions and the update that fixes it.

← All articles

Abstract cover art for the P7 DarkSword iPhone spyware variant

Security & Privacy

9 Oct 20265 min read

A new DarkSword variant called P7 steals keychain data and crypto wallets from unpatched iPhones, iVerify says

iVerify has found P7 DarkSword, a reworked variant of the leaked iPhone spyware that processes keychain data on the phone and targets crypto wallets.

Pinkesh Gajera

Abstract cover art for Safari blocking ad data domains on iOS 27

Security & Privacy

7 Oct 20264 min read

Safari on iOS 27 blocks The Trade Desk's ad domain, and AdExchanger says hundreds more ad data firms are on Apple's list

Safari on iOS 27 blocks The Trade Desk's adsrvr.org and five ID firms outright. AdExchanger reports Apple's list is growing to hundreds of companies.

Pinkesh Gajera

Abstract cover art for Safari and Google Chrome promotions

Security & Privacy

6 Oct 20263 min read

Safari code in the iOS 27.2 beta detects Google's Chrome promotions, 9to5Mac finds

9to5Mac reports that Safari in the iOS 27.2 beta can spot Google's banners urging users to install Chrome, and log whether people accept or dismiss them.

Pinkesh Gajera

Abstract cover art for iPhone theft using Face ID

Security & Privacy

5 Oct 20264 min read

Miami Beach taxi thefts used drunk passengers' faces to unlock their iPhones and move money, police say

Miami Beach police say a taxi driver and an accomplice unlocked intoxicated clubgoers' iPhones with their faces and moved money out. What protects against it.

Pinkesh Gajera

Abstract cover art: a shield motif on an ink background

Security & Privacy

3 Oct 20264 min read

Apple will make Full Disk Access on macOS harder to grant, citing AI agents, and gives no date

Apple says it will add controls so that granting Full Disk Access on the Mac takes very explicit user action, because AI agents raise the risk. No date yet.

Pinkesh Gajera

Abstract cover art: a shield motif on a deep background

Security & Privacy

2 Oct 20264 min read

GrayKey can keep a seized iPhone unlockable after Inactivity Reboot, a leaked Magnet Forensics video claims

404 Media says a Magnet Forensics training video claims GrayKey can keep a seized iPhone in its unlocked-once state even after it reboots.

Pinkesh Gajera

Abstract cover art: a timeline motif on an ink background

Security & Privacy

2 Oct 20264 min read

Apple's original Developer ID certificate authority expires on 1 February 2027, breaking older Mac installers

Certificates from Apple's original Developer ID Sub-CA stop working on 1 February 2027. Notarised apps keep running; .pkg installers do not.

Pinkesh Gajera

Abstract cover art: a bars motif on a warm background

Security & Privacy

1 Oct 20265 min read

A fake Zoom installer for Mac talks users past Gatekeeper to plant a backdoor, Jamf finds

Jamf Threat Labs found a fake Zoom disk image whose background art tells Mac users how to override Gatekeeper, then installs a backdoor it calls CloudSyncD.

Pinkesh Gajera

Security & Privacy

1 Oct 20264 min read

Older adults reported 7.7 billion dollars of fraud losses last year. These iPhone settings make a scam harder.

The FBI says people over 60 reported 7.7 billion dollars in fraud losses in 2025. Five iPhone settings, set up together, make the common scams harder to pull off.

Pinkesh Gajera

Abstract cover art: a shield motif on a warm background

Security & Privacy

1 Oct 20263 min read

Hong Kong police link 1,503 fraudulent iPhone 18 orders to a gap in Apple's online checkout

Hong Kong's police chief says 1,503 iPhone 18 orders were placed with stolen cards because Apple's web checkout skipped verification. All were cancelled.

Pinkesh Gajera

Security & Privacy

1 Oct 20265 min read

A fake iPhone Duo pre-order page runs the DarkSword exploit on unpatched iPhones

Malwarebytes found a fake iPhone Duo pre-order page that tries the leaked DarkSword exploit chain on any iPhone that opens it, before a form is touched.

Pinkesh Gajera

Abstract cover art: a grid motif on an ink background

Security & Privacy

29 Sept 20264 min read

Find My in iOS 27 can hide your location from one person, and tell them nothing

A Hide Location option in the iOS 27 Find My app pauses sharing with one chosen person, and sends them no notification that anything has changed.

Pinkesh Gajera

Security & PrivacySecurity & Privacy

A new DarkSword variant called P7 steals keychain data and crypto wallets from unpatched iPhones, iVerify says

Safari on iOS 27 blocks The Trade Desk's ad domain, and AdExchanger says hundreds more ad data firms are on Apple's list

Safari code in the iOS 27.2 beta detects Google's Chrome promotions, 9to5Mac finds

Miami Beach taxi thefts used drunk passengers' faces to unlock their iPhones and move money, police say

Apple will make Full Disk Access on macOS harder to grant, citing AI agents, and gives no date

GrayKey can keep a seized iPhone unlockable after Inactivity Reboot, a leaked Magnet Forensics video claims

Apple's original Developer ID certificate authority expires on 1 February 2027, breaking older Mac installers

A fake Zoom installer for Mac talks users past Gatekeeper to plant a backdoor, Jamf finds

Older adults reported 7.7 billion dollars of fraud losses last year. These iPhone settings make a scam harder.

Hong Kong police link 1,503 fraudulent iPhone 18 orders to a gap in Apple's online checkout

A fake iPhone Duo pre-order page runs the DarkSword exploit on unpatched iPhones

Find My in iOS 27 can hide your location from one person, and tell them nothing

Security & Privacy