GoKawiil
Tech News
Binance has warned iPhone users of an iOS vulnerability dubbed worse_query that lets malicious apps read files from other apps, potentially exposing seed phrases, private keys, and login credentials. Security researchers who disclosed the flaw say it affects iOS 26.7.1, 27.0.1, and 27.2, and remains unpatched even in iOS 27.2.1 and the 27.3 beta.
Binance alerted users to a vulnerability affecting iOS 26.7.1, 27.0.1, and 27.2, dubbed 'worse_query,' that lets malicious apps read private files from other apps, including seed phrases, private keys, and login credentials. A public proof-of-concept tool called WQ Files can exploit this without jailbreaking, though it requires sideloading onto a device. Apple issued patches on November 9 (iOS 27.2.1, 26.7.3, 18.7.12) addressing a related flaw, CVE-2026-113963.