buildOne report1 publisher CISA gives federal agencies until October 2 to patch Apple's CoreGraphics flaw
CISA added Apple's CoreGraphics out-of-bounds write, CVE-2026-86950, to its KEV catalog with an October 2 deadline for federal agencies. Apple's iOS advisory is dated September 28, so agencies have four days to move iPhones, iPads and Macs onto patched builds.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap0
- Incentives
- Not scored
- Confidence58
Apple's latest mercenary spyware notifications went to users in 110 countries. The response checklist is per-person, and a standard MDM baseline covers almost none of it.
Perspective Coverage
4 publishers
- Builder
- Builder 16%
- Operator
- Operator 79%
- Investor
- Investor 5%
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+10
- Incentives40
- Confidence65
Apple told TechCrunch it warned selected users across 110 countries on Thursday. For any org with journalists, diplomats or executives on iOS, the hardened profile is no longer an edge case.
Perspective Coverage
3 publishers
- Builder
- Builder 12%
- Operator
- Operator 75%
- Investor
- Investor 13%
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+10
- Incentives50
- Confidence68
Access Now says helpline requests ran 30% to 40% above the usual post-notification surge, a record. Among the recipients: a Ukrainian soldier who assumed the alert was a scam.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+25
- Incentives35
- Confidence60
Mercenary spyware targeting reached three Turkish ministers on hardened, encrypted phones
At least three Turkish cabinet ministers turned up in Apple's latest mercenary spyware notification batch. Ankara's remediation ran ahead of any identification of the tool, and it may have to stay that way.
Reality
- Evidence35
- Adoption38
- Hype gap+14
- Incentives62
- Confidence42