GoKawiil
Tech News
In the latest episode of 9to5Mac's Security Bite Podcast, host Arin Waichulis interviews Ananay Arora, founder and CEO of Y Combinator startup OpenHack. The discussion covers OpenHack's 'always-on AI security engineer' tool for finding vulnerabilities on Mac and other platforms, along with Apple's Security Bounty Program and advice for researchers seeking their first CVE.
Apple has released a security update fixing a vulnerability in the graphics engine underlying iOS 26, iPadOS 26 and macOS 26, which the company says may have already been used against specific targeted individuals. Meta's product security team discovered and reported the flaw, tracked as CVE-2026-86950; Apple did not disclose how it was found or how many devices were affected. Devices on the newer iOS 27, iPadOS 27 and macOS 27 also received Tuesday's update but were not vulnerable to this particular bug.
Apple has pushed out a second round of release candidates for macOS Tahoe 26.7.1 (build 25G313) and macOS Sequoia 15.8.1 (build 24H212), just days after the first RCs. Apple describes both updates as containing important security fixes recommended for all users, without further detail yet on what's being patched.
Apple's iOS 27 update includes a new feature called Impersonation Risk Detection, designed to catch users in the middle of a scam, such as being tricked by a fake bank fraud department into transferring money or resetting a password. Supported apps can query the iPhone during sensitive actions like payments or password changes, prompting the device to analyze interaction patterns, timing, context, and sensor data to assess whether the activity looks legitimate or suspicious.
Apple published a Security Research blog post explaining how its new Reference Image camera feature, launching on the iPhone 18 Pro, verifies that photos are authentic from the moment they're captured. The system creates a secure digital negative with signed metadata and timestamps inside Apple's Private Cloud Compute environment, and uses a sensor-level trust chain with revocation lists to flag compromised hardware or fraudulent images.
Apple released detailed security changelogs for macOS 27 Golden Gate, macOS Tahoe 26.7, and macOS Sequoia 15.8, collectively addressing more than 200 vulnerabilities. The flaws include bugs that could let attackers execute code with kernel or root privileges, escape the sandbox, bypass Gatekeeper, or trigger remote code execution via Bluetooth, CUPS, and WebDAV.