New zero-day flaw at Apple: update 26.7.1 patches a vulnerability already under active exploit

Apple has just released emergency updates for iPhone and iPad to address a critical zero-day flaw already being exploited in targeted attacks. This new alert raises questions about the rise of such vulnerabilities and the growing role of artificial intelligence (AI) in discovering them. Cryptocurrency holders are particularly at risk. The article New zero-day flaw at Apple: update 26.7.1 patches a vulnerability already under active exploit first appeared on Cryptoast.

Apple has issued urgent iOS 26.7.1 and iPadOS 26.7.1 updates to neutralize a critical zero-day vulnerability, identified as CVE-2026-86950. Located within the CoreGraphics component, this flaw allows malicious actors to execute arbitrary code on targeted devices via specially crafted files. Although Apple has confirmed that this breach has already been exploited in highly sophisticated attacks, the company is urging affected users to update their systems immediately, as iOS 27 versions remain unaffected.

This latest incident highlights a fundamental shift in cybersecurity, now heavily influenced by the rise of artificial intelligence. According to experts, the automation of code analysis allows attackers to identify security flaws with unprecedented speed. This phenomenon is illustrated by a record volume of patches: in September 2026 alone, 273 distinct vulnerabilities required remediation, imposing a frantic pace of technological maintenance that appears to be outpacing the reaction capabilities of end users.

One of the major challenges lies in the diversity of active devices. Apple's data indicates that a significant portion of the global user base—roughly 21% of iPhones—was not running the latest version prior to the release of iOS 27. This accumulated delay represents potentially over 200 million vulnerable devices that may not always receive security patches in real time. Such negligence, whether intentional or technical, provides a major gateway for cybercriminals seeking to compromise outdated systems.

For the crypto community, these mobile vulnerabilities pose a direct and serious threat. Compromising a smartphone can lead to the outright theft of private keys or recovery phrases stored in mobile applications. Faced with this surge in automated attacks, specialists strongly advise against storing significant amounts of cryptocurrency on internet-connected devices. The use of hardware wallets, which remain isolated from digital attack vectors, remains the most robust defense strategy today for securing digital assets against an ever-expanding attack surface.