3 ms·

I got an alert this morning for an iOS update numbered 26.3.1(a). (a)? This must be really bad.

FuriouslyAdrift 7mo ago
Impact: Processing maliciously crafted web content may bypass Same Origin Policy Description: A cross-origin issue in the Navigation API was addressed with improved input validation. WebKit Bugzilla: 306050 CVE-2026-20643: Thomas Espach
dewey 7mo ago
> It can take over devices running iOS 18 that simply visit infected websites. I wonder if this is supposed to be > iOS 18 or really just version 18?
- quentindanjou 7mo ago
  It's in the source article (from Google Research group): > DarkSword supports iOS versions 18.4 through 18.7 https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain https://cloud.google.com/blog/topics/threat-intelligence/dar... The source exploits continued to be patched with all of them patched in iOS 26.3
  - dewey 7mo ago
    Oh, I was confused why the article was so short and chalked it up to it being some developing story. Turns out there's a "You’ve read your last free article." heading that hides the rest but it's not very obvious that there's an article hiding.
bombcar 7mo ago
What device? I don't see anything beyond 26.3.1 on my iPhone 15 PromaxXDR™
- joezydeco 7mo ago
  iPhone 15 (vanilla) running iOS 18.7.2. I now have a permanent notification on my lock screen nagging me to update to iOS 26.
  - qaz_plm 7mo ago
    Enabling beta updates for ios18 should kill the nagging notification.
    - joezydeco 7mo ago
      I'm keeping it there to remind me to stay defiant against the shittier UI. I'll wait until they can put it on a user switch or create a more readable option for older users. Which will probably be 'never'.
      - a012 7mo ago
        I’m on the same boat. I was forced to update to the shitty UI at work, but not on my personal phone.
        joezydeco 7mo ago
        Same here. Which helped me confirm how bad it was.
      - 6510 7mo ago
        redmagic 11 is almost 1000 usd cheaper than the s25.
    - fn-mote 7mo ago
      But still only gets you to 18.7.3
- aurea 7mo ago
  The update can be found under Settings > Privacy & Security > Background Security Improvements
eugenekolo 7mo ago
Unrelated bug as far as I can tell.

Impact: Processing maliciously crafted web content may bypass Same Origin Policy Description: A cross-origin issue in the Navigation API was addressed with improved input validation. WebKit Bugzilla: 306050 CVE-2026-20643: Thomas Espach

dewey 7mo ago

> It can take over devices running iOS 18 that simply visit infected websites. I wonder if this is supposed to be > iOS 18 or really just version 18?

quentindanjou 7mo ago
It's in the source article (from Google Research group): > DarkSword supports iOS versions 18.4 through 18.7 https://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain https://cloud.google.com/blog/topics/threat-intelligence/dar... The source exploits continued to be patched with all of them patched in iOS 26.3
- dewey 7mo ago
  Oh, I was confused why the article was so short and chalked it up to it being some developing story. Turns out there's a "You’ve read your last free article." heading that hides the rest but it's not very obvious that there's an article hiding.

bombcar 7mo ago

What device? I don't see anything beyond 26.3.1 on my iPhone 15 PromaxXDR™

joezydeco 7mo ago
iPhone 15 (vanilla) running iOS 18.7.2. I now have a permanent notification on my lock screen nagging me to update to iOS 26.
- qaz_plm 7mo ago
  Enabling beta updates for ios18 should kill the nagging notification.
  - joezydeco 7mo ago
    I'm keeping it there to remind me to stay defiant against the shittier UI. I'll wait until they can put it on a user switch or create a more readable option for older users. Which will probably be 'never'.
    - a012 7mo ago
      I’m on the same boat. I was forced to update to the shitty UI at work, but not on my personal phone.
      - joezydeco 7mo ago
        Same here. Which helped me confirm how bad it was.
    - 6510 7mo ago
      redmagic 11 is almost 1000 usd cheaper than the s25.
  - fn-mote 7mo ago
    But still only gets you to 18.7.3
aurea 7mo ago
The update can be found under Settings > Privacy & Security > Background Security Improvements

eugenekolo 7mo ago

Unrelated bug as far as I can tell.