Apple backports CoreGraphics zero-day patches to older iPhones
2026-10-27T13:23:22Z•d69752cf1efbee9b3f10dbe299550e86395cd5065329c08843e2c982fc0c73e6
CVE-2026-109618CVE-2026-109619AI agent securityApple iOSBaton DropBrotliCoreGraphicsHTTP2ShellMicrosoft .NETNode.jsPHP2ShellRCESecure Boot bypassUEFI bootkitactively exploited vulnerabilitycredential resetcybercrimedata breachsupply chain securityzero-day
What happened
A BleepingComputer security news feed covering actively exploited vulnerabilities, critical software flaws, data breaches, cybercrime, AI-agent abuse, and a UEFI bootkit campaign. Key items include Apple backporting patches for an iOS zero-day exploited in targeted attacks; CISA confirming exploitation of PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619; critical Brotli flaws affecting Node.js and .NET; and BlackX exploiting the Baton Drop UEFI vulnerability to bypass Secure Boot.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- d69752cf1efbee9b3f10dbe299550e86395cd5065329c08843e2c982fc0c73e6
- Enrichment time
- 2026-10-27T13:23:22Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.