DGSSI warns iPhone, Mac users of critical Apple flaw
Morocco's cybersecurity agency DGSSI has warned of a critical security flaw in Apple products already being exploited in targeted attacks, urging iPhone, iPad and Mac users to update their devices immediately.
Morocco's Directorate General for Information Systems Security (DGSSI), part of the National Defense Administration, warned in an urgent security bulletin issued Tuesday, 27 October 2026, of flaws rated "critical" in several Apple systems and software. One of them, the agency said, is already being exploited in attacks targeting specific users.
According to the bulletin, issued through DGSSI's monitoring, detection and cyberattack response center, the flaws affect iOS, iPadOS, macOS, the Safari browser, as well as tvOS, visionOS and watchOS. Exploiting them could allow remote execution of malicious code, privilege escalation on the device, access to sensitive information, bypassing of protection mechanisms, or denial of service.
A flaw "already exploited" in the CoreGraphics component
The most serious flaw is tracked as CVE-2026-86950 and lies in CoreGraphics, Apple's component for processing and displaying graphics. Apple says opening or processing a malicious file through this flaw could allow code execution on the device, adding that it "has already been exploited in an extremely sophisticated attack" against specific individuals using iOS versions older than iOS 27 — while stressing this does not mean all users of those versions were targeted.
Affected devices and available updates
The security fixes Apple released on 26 October 2026 cover several systems, as shown below:
| System / app | Fixed version |
|---|---|
| iOS and iPadOS 18 | 18.7.11 |
| iOS and iPadOS 26 | 26.7.2 |
| iOS and iPadOS 27 | 27.2 |
| macOS Sequoia | 15.8.2 |
| macOS Tahoe | 26.7.2 |
| macOS Golden Gate | 27.2 |
| Safari (on Sequoia and Tahoe) | 27.2 |
| tvOS, visionOS and watchOS | 27.2 |
DGSSI is urging Moroccan Apple users to install the update for their device without delay, via Settings > General > Software Update on iPhone and iPad, or System Settings > General > Software Update on Mac, with full technical details available in Apple's security bulletins published on 26 October 2026.
An alert that goes beyond those directly targeted
Given how widely Apple products are used in Morocco, both personally and professionally, the warning concerns a far wider public than those directly hit by the documented attack: the other, unnamed flaws could in theory be exploited by any attacker on devices that have not been updated, making the security update essential for anyone with an iPhone, iPad or Mac, whether directly targeted or not.