A public iOS sandbox escape could expose wallet keys, Binance warns. No attacks are reported and no fix is confirmed. On 10 November, Binance warned users about a public iOS sandbox escape that lets one app read the files of other apps. Seed phrases, private keys and login credentials could be exposed to a malicious […]
This page shows only the headline and the short summary. The full text is published by the original source.
Binance is warning about a vulnerability in Apple's iOS 26.7.1, 27.0.1, and 27.2 that could allow third-party apps to read private files stored by other apps, including cryptocurrency seed phrases, secret keys, and login credentials. [...]
Binance warned that an iOS sandbox escape called worse_query could allow malicious apps to read files from other apps, potentially exposing cryptocurrency wallet seed phrases, private keys, and login credentials. Binance operates a cryptocurrency exchange, while self-custody wallets let users control funds through their own cryptographic keys. Exposing a wallet’s seed phrase or private key … The post Binance warns iO…
Apple released security updates that address two iMessage vulnerabilities that could let attackers join private group conversations and read messages, or allow newly added members to access earlier exchanges. The fixes arrived in iOS 27.2.1 and iPadOS 27.2.1, alongside patches for Bluetooth and AirPlay weaknesses that could enable unauthorized device pairing. Apple’s security advisory credits … The post Apple fixes i…
Google has released Chrome updates for desktop and Android to patch a zero-day vulnerability already being exploited in attacks.
