TECH NEWS

Apple plugs image-processing hole ripe for spyware abuse

Patch batch spans current kit, older iGadgets, Macs, and Vision Pro

Apple has released a batch of vulnerability fixes for iPhones, iPads, and Macs, including an image-processing flaw that experts say has the hallmarks of a spyware delivery vector.

The most notable patch is for CVE-2026-65346, a defect in the ImageIO framework Apple uses to parse image files.

Discovered and reported by Nik Tsytsarkin of Meta's Red Team X, CVE-2026-65346 is an integer-overflow bug that could allow arbitrary code execution when an affected device processes an image.

The bug affects macOS Tahoe, iPhone 11 and later, and supported iPad Pro, iPad Air, iPad, and iPad mini models.

Apple said it addressed the flaw with improved input validation, and experts urged users to install the August 17 updates as soon as possible.

Adam Boynton, senior enterprise strategy manager at Jamf, said: "iOS 26.6.1's standout fix is CVE-2026-65346, an integer overflow in...

Copyright of this story solely belongs to theregister.com. To see the full text click HERE

https://www.zdnet.com/a/img/resize/73402b35db0f2915a22a89d7e962808160145719/2026/08/17/8ec82a62-3363-4ee4-adbd-c1539071e15b/zdnet-r3-bgg-promo.jpg?auto=webp&fit=crop&height=675&width=1200

Can you guess Apple's next move? Last chance to win big in ZDNET's Big Guessing Game

Follow ZDNET: Add us as a preferred source on Google. We have reason to believe Apple's September 2026 event will be a big one. It's possible Apple will announce a new foldable iPhone, potentially a touchscreen MacBook... or, maybe both? Have your own ideas of what

https://techcrunch.com/wp-content/uploads/2026/01/bluesky-GettyImages-2185144073.jpg?w=1024

Bluesky says its recent outage was caused by another DDoS attack

Social networking site Bluesky says its recent day-long disruption was caused by a distributed denial-of-service (DDoS) attack that flooded the site with junk traffic. The social network confirmed the incident in a post on Monday, confirming the attack had taken place over the previous 24 hours. “We have upgraded our

https://hackster.imgix.net/uploads/attachments/1988726/_zgQXwcZ5Og.blob?auto=compress%2Cformat&w=600&h=450&fit=min

PINE64 Calls Time on the Linux Hardware Market, Ceases Producton Until the AI Bubble Bursts

Open hardware specialist PINE64 has announced that it is exiting the Linux single-board computer, phone, and tablet market — at least until the bursting of the artificial intelligence (AI) bubble and a drop in sky-high component prices. "Due to the current DRAM/eMMC shortage, there isn't any plans

https://hackster.imgix.net/uploads/attachments/1988789/_lwsp86ZRr1.blob?auto=compress%2Cformat&w=600&h=450&fit=min

Prusa Promises Improved 3D Printing From a Wholly Refreshed Hardware Lineup, Teases PrusaSlicer 3.0

3D-printing pioneer Prusa Research has announced a total refresh of its 3D printer lineup, along with a release of the "next generation" PrusaSlice 3.0 to come "within weeks" to those willing to be alpha testers. "This summer, we are refreshing the entire lineup of

Read more

Can you guess Apple's next move? Last chance to win big in ZDNET's Big Guessing Game

Bluesky says its recent outage was caused by another DDoS attack

PINE64 Calls Time on the Linux Hardware Market, Ceases Producton Until the AI Bubble Bursts

Prusa Promises Improved 3D Printing From a Wholly Refreshed Hardware Lineup, Teases PrusaSlicer 3.0