Cybersecurity
Binance has issued an urgent warning to iPhone users: a flaw in iOS dubbed “worse_query” could let a malicious app read local file
Binance has issued an urgent warning to iPhone users: a flaw in iOS dubbed “worse_query” could let a malicious app read local files stored by other apps —…
The flaw affects iOS 26.7.1, 27.0.1 and 27.2. A proof-of-concept was published on GitHub on November 8, and a tool built on it, WQ Files, can browse, export, edit and delete other apps’ data without a jailbreak. It reaches iPhones through sideloading via AltStore or SideStore — not through the App Store.
Apple released iOS 27.2.1 and 26.7.3 on November 9, but has NOT confirmed a fix for worse_query, and no CVE number is confirmed. No crypto thefts have been confirmed so far.
Binance advises iPhone users to delete untrusted or sideloaded apps, update iOS and all apps, and — if compromise is suspected — move funds to a new wallet created on a clean device and reset all active login sessions.
✓ Verified SourcesBleepingComputer, The Hacker News
More in Cybersecurity
GitHub 'wfx-loot' secret stealer hits 61,764 repositories
The figures require careful reading, because different numbers describe different parts of the campaign. Aikido reports that 4,837 hijacked GitHub……
Apple has released iOS 27.2.1 — an urgent security-only update for iPhone, with no new features.
It also patches Bluetooth and AirPlay pairing flaws — including unauthorised pairing without user interaction and pairing-code rate-limit bypasses —……
NVIDIA is facing a crisis at the very top.
CEO Jensen Huang admitted in an email to employees on Sunday, November 8, that he was unfaithful to his wife, taking "full responsibility". He did……