InfoSecBulletin Cybersecurity for mankind
Apple has launched iOS 26.7.1 and iPadOS 26.7.1 to fix a serious zero-day flaw that it believes might have been used in a very advanced attack on specific people.
The security flaw, labeled as CVE-2026-86950, impacts the CoreGraphics framework. This is an important Apple part that helps show graphics, images, and documents on iPhones and iPads.
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
“InfoSecCon-2026: Bangladesh’s Cybersecurity Leaders Unite to Shape a Safer Digital Future”
Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation
AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage
Cisco Warns of Critical ISE 0-Day Flaw and Hackers Allegedly Selling Fortinet FortiGate 1-Day Flaw
Anthropic prepares “Claude Money” to analyze bank account and financial data
GhostCode Phishing Kit Evades Microsoft 365 MFA to Hijack Accounts in 78 Seconds
CISA Warns of Cisco Secure Email Gateway 0-Day Flaw Actively Exploited in Attacks
VPN flaw exposed 246,000 personnel records in japan
Successful exploitation could let attackers run any code on a weak device by tricking a victim into opening a harmful file. Apple shared updates on September 28, 2026, and asked users to install them quickly. The problem impacts iPhone 11 and newer models, as well as some iPad Pro, iPad Air, iPad, and iPad mini devices.
Pentagon Data breach
A data breach at the Pentagon’s vast HR system has exposed Social Security numbers and other personal information of current and former military personnel, raising counterintelligence concerns among national security experts.
The Pentagon has confirmed that the breach affects 2.76 million “living individuals,” a category that potentially includes current and former defense personnel or their dependents, and 294,000 “deceased individuals,” a Defense Department official told CNN on Monday, three days after this story was published.
“Unauthorized users” gained access to a vulnerable computer server belonging to the Defense Manpower Data Center (DMDC) beginning last October, but it wasn’t until nine months later, in July, that the Pentagon discovered and remediated the issue, according to a letter the center sent to victims of the breach reviewed by CNN.
The DMDC maintained at least 60 million records as of fiscal 2024, according to its website.
The Pentagon says it has no signs of misuse of the stolen data. However, this data could be very valuable for foreign spies wanting to monitor US military staff, or for hackers wanting to blackmail them, experts say.
Notifications started going to victims in a letter on September 18. People should sign up quickly, check their credit reports, monitor their bank and government accounts for strange activity, and be careful with unexpected calls, messages, or emails about military jobs.
