Apple Emergency Patch for iOS 26, macOS26, macOS15 (CVE-2026-86950), (Mon, Sep 28th)

2026-09-29T01:23:40Z•9e2dc8f0633c7ab90d38149ff5e2e103742349871bf8fd2a018afac7504bcaf0
CVE-2026-86950AppleClickFixHTTPMacfingerWiresharkactively exploitediOSmacOSmalwarephishingzero-day

What happened

SANS ISC Diary feed covering an actively exploited Apple vulnerability (CVE-2026-86950) affecting older iOS and macOS branches, a Wireshark 4.6.9 security release fixing 19 vulnerabilities, and reports on Macfinger ClickFix malware and phishing techniques. The Apple issue warrants urgent patching due to confirmed exploitation.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
sans_isc_diary
Record identifier
9e2dc8f0633c7ab90d38149ff5e2e103742349871bf8fd2a018afac7504bcaf0
Enrichment time
2026-09-29T01:23:40Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.