{"data":{"id":2461,"lang":"en","title":"Apple Patches Graphics Bug in iOS 26 That May Have Been Used in Targeted Attacks","summary":"Apple fixed a graphics-engine flaw in iOS 26, iPadOS 26 and macOS 26 that may have been exploited in targeted attacks; about 80% of iPhone users remain on iOS 26.","category":"technology","category_label":"Technology","published_at":"2026-09-29T14:00:50Z","updated_at":"2026-09-29T14:00:50Z","url":"https://techtools.cz/tools/news/article/2461-apple-patches-graphics-bug-in-ios-26-that-may-have-been-used-in-targeted-attacks","api_url":"https://techtools.cz/news-api/v1/articles/2461?lang=en","markdown_url":"https://techtools.cz/news-api/v1/articles/2461.md?lang=en","image_url":"https://techcrunch.com/wp-content/uploads/2026/04/iphone-red-spyware-2255962085.jpg?w=1024","word_count":129,"reading_time_minutes":1,"sources":[{"url":"https://techcrunch.com/2026/09/29/still-running-ios-26-update-your-iphones-ipads-and-macs-for-this-urgent-security-fix/","domain":"techcrunch.com"}],"translation":{"lang":"cs","id":2535,"title":"Apple opravil chybu v grafice iOS 26, která mohla být zneužita při cílených útocích","url":"https://techtools.cz/tools/news/clanek/2535-apple-opravil-chybu-v-grafice-ios-26-ktera-mohla-byt-zneuzita-pri-cilenych","api_url":"https://techtools.cz/news-api/v1/articles/2535?lang=cs"},"content":"Apple released an urgent security update for iOS 26, iPadOS 26 and macOS 26 fixing CVE-2026-86950, a bug in the core graphics engine. Apple said the flaw \"may have been exploited\" in \"an extremely sophisticated attack against specific targeted individuals,\" without confirming whether attacks took place. Meta's product security team discovered and reported it.\n\nGraphics engines have broad system access, so a successful exploit could let attackers steal wide swaths of personal data. iOS 27, iPadOS 27 and macOS 27, released earlier in September, are not affected.\n\nThe urgency is high because roughly 80% of iPhone users are still on iOS 26. The report also notes a separate zero-click flaw, CVE-2026-86869, found by Belgian firm ironPeak, which could be triggered via a malicious iMessage and bypass Apple's BlastDoor protection."}}