Apple patches older iPhones against flaw used in 'extremely sophisticated attack'
Apple released iOS 18.7.11 on 26 October for the iPhone XS, XS Max and XR. It fixes a CoreGraphics flaw (CVE-2026-86950) that Apple says may have been exploited against specific targeted individuals.
1 / 2
The story, neutrally told
Mixed · 2Apple released iOS 18.7.11 on 26 October. It is available for the iPhone XS, iPhone XS Max and iPhone XR, and Apple also released iPadOS 18.7.11 for the seventh-generation iPad. Daily MailR “The iOS 18.7.11 update, released October 26, is available for the iPhone XS, iPhone XS Max and iPhone XR.” Read at Daily Mail ↗ Gulf NewsN “Apple has also released iPadOS 18.7.11 for the seventh-generation iPad.” Read at Gulf News ↗ Mixed · 2The update fixes a vulnerability in CoreGraphics, the part of Apple's software that handles images, text and other visual content. It is tracked as CVE-2026-86950. Gulf NewsN “The vulnerability, identified as CVE-2026-86950, affects CoreGraphics, a part of Apple's operating system that handles images, text and other visual content.” Read at Gulf News ↗ Daily MailR “The attack warning concerns CoreGraphics, software that helps Apple devices process and display visual content.” Read at Daily Mail ↗ Mixed · 2The flaw could let attackers run malicious code on a device by tricking it into processing a specially crafted file. The Daily Mail describes it as an out-of-bounds memory write, which Apple fixed by improving memory-boundary checks. Gulf NewsN “The flaw could let attackers run malicious code on a vulnerable device by tricking it into processing a specially crafted file.” Read at Gulf News ↗ Daily MailR “the flaw allowed information to be written outside an intended area of memory, potentially enabling an attacker's code to run.” Read at Daily Mail ↗
Mixed · 2Apple said it is aware of a report that the issue may have been exploited in an 'extremely sophisticated attack against specific targeted individuals' on versions of iOS before iOS 27. It credited Meta Product Security with reporting the flaw. Gulf NewsN “Meta's Product Security team reported the flaw.” Read at Gulf News ↗ Daily MailR “Apple said the issue 'may have been exploited in an extremely sophisticated attack against specific targeted individuals' on versions of iOS before iOS 27.” Read at Daily Mail ↗ Mixed · 2Apple has not identified the victims or disclosed details of the attacks. Gulf News adds that the advisory gives no evidence of widespread exploitation. Gulf NewsN “The company has not identified the alleged victims or disclosed details of the attacks. Its advisory provides no evidence of widespread exploitation.” Read at Gulf News ↗ Daily MailR “Apple has not identified the victims or said the camera flaw was used against them.” Read at Daily Mail ↗ Centre · 1Gulf News reports that Apple had already patched the same flaw for newer devices in September, so this release extends the fix to older devices still receiving iOS 18 security updates. Gulf NewsN “Apple had already patched the same flaw for newer devices in September.” Read at Gulf News ↗
Right · 1Security researchers at Calif separately showed that a PDF with a specially crafted font could trigger memory corruption, according to the Daily Mail. Their analysis raised a possible link to WhatsApp but did not establish how the real attacks were delivered. The Daily Mail also notes that Apple's advisory does not confirm this flaw alone gave attackers full control of a phone. Daily MailR “Security researchers at Calif separately demonstrated that a PDF containing a specially crafted font could trigger memory corruption.”“Their analysis raised a possible connection to WhatsApp, but did not establish how the real attacks were delivered.” Read at Daily Mail ↗ Mixed · 2The update fixes two further flaws: one could let a malicious app access the camera without permission, and one could let an app expose sensitive information. Apple has reported no real-world exploitation of either. Gulf NewsN “The company has not reported any real-world exploitation of either flaw.” Read at Gulf News ↗ Daily MailR “The camera and information-leak vulnerabilities are separate issues, with no exploitation warning attached to either in this advisory.” Read at Daily Mail ↗ Mixed · 2Apple also released iOS 27.2 and iOS 26.7.2 for newer devices on 26 October. Both outlets tell users to open Settings, then General, then Software Update, and to install the latest version offered for their model. Gulf NewsN “Apple also released separate security updates on October 26 for newer devices, including iOS 27.2 and iOS 26.7.2.” Read at Gulf News ↗ Daily MailR “The number offered can differ on newer devices, so install the latest compatible update shown for your model” Read at Daily Mail ↗
Every sentence links to the reporting it rests on. The pill in front of each says where its sources sit: Left, Centre or Right when one side supplies at least half of them, Mixed when they are evenly split. The number is how many outlets it cites.
Left0 outlets
No left outlet in our sources has covered this story yet.
Centre1 outlet
- Framing
- A consumer-service explainer on a security fix for older iPhones, set out as questions and answers and aimed at people still using older devices.
- Emphasis
- The September patch for newer devices, the lack of evidence of widespread exploitation, and the list of affected devices.
- Leaves out or plays down
- Does not mention the Calif researchers' proof of concept or the possible WhatsApp link.
- Charged language
- “extremely sophisticated attack”
Right1 outlet
- Framing
- An urgent-warning story built around Apple's 'extremely sophisticated attack' wording, with a long step-by-step update guide.
- Emphasis
- The threat of device hijacking, the Calif researchers' demonstration and possible WhatsApp link, and detailed installation steps.
- Leaves out or plays down
- Does not say the flaw was already patched for newer devices in September.
- Charged language
- “urgent warning”“hijack devices”“booby-trapped file”
- For example
-
“Apple has issued an urgent warning to iPhone users after identifying an 'extremely sophisticated attack' that can hijack devices.” — Daily Mail
“That distinction matters, as Apple's advisory does not confirm that this flaw alone gave hackers complete control of an entire phone.” — Daily Mail
What every side reports
- iOS 18.7.11 was released on 26 October for the iPhone XS, XS Max and XR, with iPadOS 18.7.11 for the seventh-generation iPad.
- The fix covers CVE-2026-86950 in CoreGraphics, reported by Meta Product Security.
- Apple says the flaw may have been exploited in an extremely sophisticated attack against specific individuals, and has not identified the victims.
- Two further flaws, covering camera access and information exposure, were fixed, with no reported exploitation.
- Users should update via Settings > General > Software Update.
Where accounts differ
-
How urgent the threat is
- Centre
- Gulf News describes a fix for older devices, notes the same flaw was patched for newer devices in September, and says the advisory gives no evidence of widespread exploitation.
- Right
- The Daily Mail calls it an 'urgent warning' about an attack that 'can hijack devices', then adds that Apple's advisory does not confirm this flaw alone gave full control of a phone.
Apple organisation
Apple says it is aware of a report that the flaw may have been exploited in an extremely sophisticated attack against specific individuals. It fixed the flaw with better checks on memory boundaries and recommends keeping software current.
“Apple recommends keeping software current as an important protection for its products.” — Daily Mail
“Apple says it is aware of a report that the vulnerability may have been used in an extremely sophisticated attack against specific individuals running versions of iOS before iOS 27.” — Gulf News
UK and Ireland1 outlet
The Daily Mail stresses the danger and gives a detailed update walkthrough.
“Apple has issued an urgent warning to iPhone users after identifying an 'extremely sophisticated attack' that can hijack devices.” — Daily Mail
Daily Mail
Middle East1 outlet
Gulf News presents a consumer explainer for owners of older iPhones, with context on the earlier patch.
“Apple has released a security update for older iPhones and iPads” — Gulf News
Gulf News
Left0 articles
No coverage yet.
Centre1 article
-
Still using an older iPhone? Apple releases security fix after targeted attacks
Neutral Practical explainer on the fix for older devices, noting the earlier patch for newer devices and the absence of evidence of widespread exploitation.
Right1 article
-
Apple issues warning to iPhone users over 'extremely sophisticated attack'
Alarmist Opens with an 'urgent warning' about an attack that can hijack devices, then qualifies it and gives a long update guide.
- 27 Oct 16:16 First Daily MailR Apple issues warning to iPhone users over 'extremely sophisticated attack'
- 28 Oct 07:58 +15h 43m Gulf NewsN Still using an older iPhone? Apple releases security fix after targeted attacks
Times are when each article was published, or when we first saw it if the outlet gave no time.
Ask about this story
Loading…