{"generated":"2026-11-08T11:51:51.871Z","about":"HARD Live: every security incident HARD is following, with patch status, fixed versions, what to do, and a sourced timeline. https://hard.fyi/live/","feeds":{"rss":"https://hard.fyi/live/feed.xml","changes":"https://hard.fyi/api/live?changes=1","incident":"https://hard.fyi/api/live?id={id}"},"incidents":[{"id":"apple-spyware-threat-notifications-aug-2026","category":"breach","status":"live","title":"Apple warns targeted users in 110 countries about mercenary spyware","tldr":"Apple sent spyware warnings to targeted users in 110 countries on 13 August. A warning establishes targeting, not successful infection. Verify it at account.apple.com, update your devices, enable Lockdown Mode and seek specialist help.","action":"If you received a warning, type account.apple.com into your browser and sign in to verify it. Update your Apple devices, then on iPhone or iPad open Settings → Privacy & Security → Lockdown Mode → Turn On Lockdown Mode and follow the restart prompts. Seek specialist security help; Apple recommends Access Now’s Digital Security Helpline.","product":"Apple iPhone users receiving mercenary spyware threat notifications","audience":"both","severity":"high","patch":"na","exploited":true,"cves":[],"tags":["apple","iphone","spyware","targeted-attacks","threat-notifications"],"fixed":[],"started":"2026-08-13","closed":null,"updated":"2026-11-03T20:59:44.314Z","url":"https://hard.fyi/live/apple-spyware-threat-notifications-aug-2026/","json":"https://hard.fyi/api/live?id=apple-spyware-threat-notifications-aug-2026"},{"id":"apple-coregraphics-targeted-attacks-sep-2026","category":"patch","status":"live","title":"Apple fixes CoreGraphics zero-day CVE-2026-86950 linked to targeted attacks","tldr":"A CoreGraphics flaw could let a malicious file run code on affected iPhones, iPads and Macs. Targeted exploitation was reported. Fixes now include older devices: install the latest Apple software update offered for your device.","action":"On iPhone or iPad, open Settings → General → Software Update and install the latest offered update; the fixes start at 18.7.11 or 26.7.1 for the affected branches. On a Mac, use System Settings → General → Software Update; the fixes start at Sequoia 15.8.1 or Tahoe 26.7.1.","product":"Apple iPhone, iPad and Mac","audience":"both","severity":"high","patch":"patched","exploited":true,"cves":["CVE-2026-86950"],"tags":["apple","ios","ipados","macos","coregraphics","zero-day"],"fixed":["iOS and iPadOS 18.7.11","iOS and iPadOS 26.7.1","macOS Sequoia 15.8.1","macOS Tahoe 26.7.1"],"started":"2026-09-28","closed":null,"updated":"2026-11-03T20:19:51.150Z","url":"https://hard.fyi/live/apple-coregraphics-targeted-attacks-sep-2026/","json":"https://hard.fyi/api/live?id=apple-coregraphics-targeted-attacks-sep-2026"}]}