InfoSecBulletin Cybersecurity for mankind
Apple has launched iOS 26.7.1 and iPadOS 26.7.1 to fix a serious zero-day flaw that it believes might have been used in a very advanced attack on specific people.
The security flaw, labeled as CVE-2026-86950, impacts the CoreGraphics framework. This is an important Apple part that helps show graphics, images, and documents on iPhones and iPads.
Jailbroken DeepSeek AI Agent Conducts Two-Week Cyberattack on European Telecom
Daily Cyber security update for 10.11. 2026
IBM fixes 208 API Connect vulnerabilities, 47 critical
89 New ransomware groups emerge in 2026, claiming over 2,200 victims
Daily Cyber security update for 08.11. 2026
Japan banking crisis
Outage causes disruption at 128 japan banks: preventing ATM transaction
Daily Cyber security update for 06.11. 2026
Cyber attack causes French bank Credit Mutuel Arkea €100 million missing
OpenAI AI Pipeline Discovers 948 Linux Kernel Privilege Escalation Flaws in 30 Hours
Bangladeshi Researcher Rasel Earns First Apple CVE Recognition for Model I/O Flaw
Successful exploitation could let attackers run any code on a weak device by tricking a victim into opening a harmful file. Apple shared updates on September 28, 2026, and asked users to install them quickly. The problem impacts iPhone 11 and newer models, as well as some iPad Pro, iPad Air, iPad, and iPad mini devices.
Pentagon Data breach
A data breach at the Pentagon’s vast HR system has exposed Social Security numbers and other personal information of current and former military personnel, raising counterintelligence concerns among national security experts.
The Pentagon has confirmed that the breach affects 2.76 million “living individuals,” a category that potentially includes current and former defense personnel or their dependents, and 294,000 “deceased individuals,” a Defense Department official told CNN on Monday, three days after this story was published.
“Unauthorized users” gained access to a vulnerable computer server belonging to the Defense Manpower Data Center (DMDC) beginning last October, but it wasn’t until nine months later, in July, that the Pentagon discovered and remediated the issue, according to a letter the center sent to victims of the breach reviewed by CNN.
The DMDC maintained at least 60 million records as of fiscal 2024, according to its website.
The Pentagon says it has no signs of misuse of the stolen data. However, this data could be very valuable for foreign spies wanting to monitor US military staff, or for hackers wanting to blackmail them, experts say.
Notifications started going to victims in a letter on September 18. People should sign up quickly, check their credit reports, monitor their bank and government accounts for strange activity, and be careful with unexpected calls, messages, or emails about military jobs.
