Officer's Notes
Officer's Notes|11月 10, 2026 12:41
Update your iOS devices right now! Multiple vulnerabilities fixed in this update with the worst being a bug that allows attackers to connect remotely via bluetooth without device owner clicking anything… Another vulnerability has also been recently discovered in iOS - and it allows one app to access the files of other apps, including crypto wallets. The code is already publicly available. This vulnerability, known as “worse_query,” bypasses app isolation. To carry out an attack, a malicious app exploiting this vulnerability must be installed and run. If a wallet stores secrets in files accessible to the app, seed phrases and keys could be compromised. This does not mean automatic access to all wallets; the storage method matters. The news reports list 26.7.1, 27.0.1, and 27.2, but these are simply the versions on which the developer tested WQFiles. Apple released iOS 27.2.1 yesterday, and the developers of Erosion - which exploits the same vulnerability - claim it works on that version as well. There is no confirmation yet that the latest update specifically patches the “worse_query” vulnerability. You should update your device anyway. And please do not download any apps other than verified and official ones onto your phone if it contains cryptocurrency or sensitive data.
+6
Mentioned
Share To

Timeline

HotFlash

APP

X

Telegram

Facebook

Reddit

CopyLink

Hot Reads