Every ZeroDayFeed story on Apple — across breaches, zero-days, ransomware, patches, policy, and industry, newest first.
A researcher found that eight eMudhra intermediate CA keys were generated with too little randomness to stay secret. Chrome, Mozilla and Go blocked them within days, and the emSign ECC Root CA - G3 is being removed from Chrome on Oct 27.
Read the story →Check Point's Q3 2026 brand phishing ranking puts Microsoft at 33% of impersonation attempts, up from 23% and about four times any other brand, while new lures pose as AI and developer tools to get victims to run terminal commands or install remote-management software.
Apple's September 28 updates fix CVE-2026-86950, a CoreGraphics out-of-bounds write that Apple says may have been exploited against specific targeted people on iOS versions before iOS 27. CISA's October 13 federal deadline has passed.
Free daily briefing — breaches, actively exploited bugs, ransomware, and the patches to prioritize.
You're in. ✓
Check your inbox to confirm your subscription.No spam. Unsubscribe any time. Read our privacy policy.
