EN ▼
Favorites
My Favorites
View All
Market Cap Price 24h%

Disclaimer: Content does not constitute investment advice. Trading involves risks—please invest with caution!

苹果修复iOS漏洞,防止攻击者在iPhone上运行恶意代码

2026-09-30 12:33:27
Bookmark

Apple releases updates to iOS 26.7.1 and iPadOS 26.7.1 to fix high-risk vulnerabilities

On September 28, Apple released an update to iOS 26.7.1 and iPadOS 26.7.1 to fix a serious security vulnerability. The vulnerability could allow an attacker to run arbitrary code on an affected device. The technology giant said the issue involved an out-of-bounds write flaw in CoreGraphics and pointed out that the vulnerability could be triggered by processing specially crafted malicious files.

SlowMist warns encryption users of risks

Apple has confirmed that the vulnerability may have been exploited in versions before iOS 27 in an "extremely complex attack" against specific targeted individuals. At the same time, security company SlowMist pointed out that the vulnerability was related to iOS attacks it had been tracking. The company also specifically warns cryptocurrency users to be vigilant, urging them to immediately update their Apple devices to avoid clicking on suspicious links, opening unknown files, or installing unaudited applications. Users should also be extra cautious when downloading apps or opening content from unknown sources.

A wide range of devices will be affected this time, including iPhone 11 and subsequent models, as well as a number of recently released iPad models.

Review of FomoPeek Malicious App Incident

A week ago, SlowMist reported an iOS security threat related to the FomoPeek app. The company said it had received multiple reports of users losing digital assets and found that the victim had suffered a leak of his private key. Some victims had previously installed versions 1.1 and 1.2 of FomoPeek.

SlowMist与OKX安全团队的联合调查显示,该应用内部包含恶意代码。据调查,FomoPeek内置了一个iOS内核利用框架,拥有八种攻击手段。该框架 reportedly(据报道)能够根据设备型号和iOS版本选择相应的漏洞利用方式。

受影响的版本涵盖iOS 12.0至18.7,以及iOS 26.0至26.1。如果攻击成功,漏洞可利用程序可突破iOS沙盒限制,访问其他应用的Keychain数据和文件,从而暴露私钥、助记词、登录凭证以及其他敏感信息。此外,调查还发现了隐藏的服务器连接,用于接收远程指令,且攻击功能 reportedly(据报道)会按固定间隔自动运行。

相关背景:Sparrow Wallet山寨应用诉讼案

今年早些时候,三人因苹果 allegedly(被指控)通过App Store推广名为Sparrow Wallet的虚假加密应用而对其提起诉讼。据报道,这款假冒应用在2025年5月至8月期间从受害者钱包中盗取了总计180万美元的资金。

Disclaimer:

All content published on this website, including hyperlinks, related applications, forums, blogs, and other media accounts, originates from third-party platforms and their users. CoinMarketInsight makes no representations or warranties of any kind regarding the website or its content. All blockchain-related data and materials are provided for informational and research purposes only and do not constitute financial, legal, or investment advice. Users and third parties are solely responsible for the content they publish. CoinMarketInsight shall not be liable for any losses arising from the use of this website. You should exercise caution and conduct your own independent research, review, analysis, and verification before making any decisions.

Read Full Article
More News
TOP

TOP