Apple patches CoreGraphics zero-day already exploited in targeted attacks

{
  "signal_id": "cd383b38-87fa-9400-d992-1b7517e1456b",
  "signal_type": "news",
  "signal_subtype": "launches",
  "detected_at": "2026-09-29T14:30:00+00:00",
  "company": {
    "name": "Apple",
    "domain": "apple.com"
  },
  "data": {
    "url": "https://www.theregister.com/security/2026/09/29/apple-patches-coregraphics-zero-day-already-exploited-in-targeted-attacks/5299721",
    "title": "Apple patches CoreGraphics zero-day already exploited in targeted attacks",
    "excerpt": "security Meta-spotted flaw could hand attackers arbitrary code execution via a maliciously crafted file Apple has patched a CoreGraphics zero-day after warning that attackers may already have used the bug to compromise a small number of carefully chosen targets. The vulnerability, tracked as CVE-2026-86950, is an out-of-bounds write flaw in CoreGraphics, Apple's framework for handling graphics across its operating systems. According to Apple's advisory, processing a maliciously crafted file could allow an attacker to execute arbitrary code on a vulnerable device. The fruity vendor said it addressed the problem with improved bounds checking, though the bug appears to have made it out into the wild before Apple could squash it. \"Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27,\" the company said. As is customary when Cupertino encounters the sort of security bug somebody has apparently found useful, further details are thin on the ground. Apple didn't say who was targeted, how many people were affected, who was behind the attacks, or exactly how the vulnerability was being exploited. However, its choice of words suggests this wasn't a bug being exploited indiscriminately across the internet, and raises the possibility that it was used as part of a...",
    "product": "iOS 26.7.1 and iPadOS 26.7.1",
    "summary": "Apple released security patches for a CoreGraphics zero-day vulnerability in iOS 26.7.1 and iPadOS 26.7.1.",
    "planning": false,
    "image_url": "https://image.theregister.com/5299734.jpg?imageId=5299734&x=0&y=12.35&cropw=100&croph=77.71&panox=0&panoy=12.35&panow=100&panoh=77.71&width=1200&height=683",
    "confidence": 0.9,
    "product_data": {
      "name": "iOS 26.7.1 and iPadOS 26.7.1",
      "full_text": "iOS 26.7.1 and iPadOS 26.7.1",
      "fuzzy_match": false,
      "release_type": "update"
    },
    "product_tags": [
      "online_technology",
      "general_technology",
      "mobile",
      "security"
    ],
    "published_at": "2026-09-29T14:30:00Z",
    "effective_date": "2026-09-28",
    "article_sentence": "The fix landed on Monday in iOS 26.7.1 and iPadOS 26.7.1."
  }
}

curl https://signals.autobound.ai/v1/signals/cd383b38-87fa-9400-d992-1b7517e1456b \
  -H "X-API-KEY: $AUTOBOUND_API_KEY"

curl -X POST https://signals.autobound.ai/v1/companies/enrich \
  -H "X-API-KEY: $AUTOBOUND_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"domain":"apple.com","limit":20}'