رسائلكم في "آبل" بخطر.. حدثوا "آيفون" فوراً

حثّت شركة "آبل" Apple مستخدمي هواتف "آيفون" Iphone على تثبيت أحدث تحديث لنظام التشغيل iOS، محذّرةً من أن عدم تحديث الأجهزة قد يتيح للقراصنة إمكانية الاطلاع على الرسائل.

وأطلقت آبل تحديث "iOS 27.2.1"، والذي لا يتضمن ميزات جديدة أو تغييرات كبيرة كما في بعض الإصدارات السابقة، لكنه يحمل أهمية أمنية أكبر. وتقول آبل في ملاحظات الإصدار إن التحديث "يوفر إصلاحات للأخطاء وتحديثات أمنية لجهاز "آيفون"، من دون الكشف عن تفاصيل هذه الثغرات. 

🚨 URGENT WARNING FOR ALL IPHONE USERS!! UPDATE YOUR IPHONE TO iOS 27.2.1 IMMEDIATELY! BINANCE WARNS THAT MALICIOUS APPS MAY BE ABLE TO STEAL YOUR CRYPTO WALLET SEED PHRASES ON OLDER IOS VERSIONS! ALL YOUR CRYPTO WALLETS COULD BE IN DANGER! HOW TO UPDATE: SETTINGS → GENERAL → SOFTWARE UPDATE → INSTALL THE LATEST AVAILABLE VERSION. DELETE UNTRUSTED APPS AND NEVER STORE YOUR SEED PHRASE IN UNSECURED FILES! DON'T IGNORE THIS WARNING!!

— Qmo (@QmoCrypto) November 10, 2026

وبحسب معلومات إضافية، فإن بعض المشكلات تتعلق بتطبيق "iMessage"؛ إذ قد تسمح إحدى الثغرات لمخترق بالانضمام إلى محادثة جماعية من دون دعوة والاطلاع على الرسائل المتبادلة فيها، فيما قد تمكّن ثغرة أخرى من رؤية الرسائل التي أُرسلت داخل المجموعة قبل انضمام المستخدم إليها.

كما تشمل الثغرات مشكلات في آلية اتصال أجهزة آبل ببعضها، بينها ثغرتان مرتبطتان بتقنية "بلوتوث"، إحداهما قد تتيح للمخترقين استخدام جهاز لاسلكي لتشغيل شيفرة خاصة على الجهاز المستهدف.

Your iPhone could be facing a security risk Read Binance's latest warning if you're an iPhone user Binance has flagged a new iOS vulnerability called worse_query, affecting iOS versions 26 7 1, 27 0 1 and 27 2 This vulnerability could allow malicious apps to access local files belonging to other apps This means sensitive information such as seed phrases, private keys and login credentials could be exposed This is an iOS-level issue, not a vulnerability specific to Binance Here are some steps you should take immediately → Remove apps installed from untrusted sources → Update iOS and all apps to the latest official versions → If you suspect your device has been compromised, create a new wallet on a clean device and transfer your funds there → Reset all active login sessions Don't overlook device security, especially if you store crypto assets on your phone

— Lens  (@LensMoso) November 10, 2026

ورغم ذلك، لم تؤكد آبل أن أيا من هذه الثغرات استُغلت فعليا من قبل المخترقين. وقال آدم بوينتون، مدير الاستراتيجية المؤسسية الأول في شركة Jamf المتخصصة في إدارة وحماية أجهزة آبل داخل الشركات والمؤسسات والمدارس: "الأمر يتعلق بتثبيت التحديث بسرعة، لا بإثارة الذعر". 

🔒 Cybersecurity Daily — 2026-11-10 iOS sandbox escape ships crypto keys — if your apps sideloaded, move funds now. Today: iOS sandbox escape for keys, SAP critical flaws patched, rich network data importance, Apple iMessage… 📖 Full briefing: https://t.co/SiSdaGzjJ4 ━━━━━━━━━━━━━━━━━━━━ TL;DR — today's stories: 1. Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed A researcher detailed an iOS sandbox escape that could allow malicious apps to access sensitive data like crypto wallet keys. Binance warns of this risk, advising users to update their devices and apps, though no fix is currently confirmed. 🔗 https://t.co/njD4Fu1YhP 2. SAP patches ICM2SHELL and PROXYGATE maximum severity flaws SAP has released patches for critical vulnerabilities in its ICM2SHELL and PROXYGATE components. These flaws carried maximum severity, indicating a significant risk to systems utilizing these SAP functions. 🔗 https://t.co/bddzzGtXXM 3. Beyond the Alert: The Case for Rich Network Data This article argues for the importance of rich network data beyond simple alerts. It highlights that effective incident response and intervention depend on understanding post-detection activity and having visibility into the network. 🔗 https://t.co/EsMBZY0zLK 4. Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities Apple has addressed privacy vulnerabilities in iMessage group chats that could allow unauthorized access to messages. Updates were also released to fix Bluetooth pairing flaws. 🔗 https://t.co/JcDY6as66p 5. Hackers now exploit critical Barracuda ESG flaws to gain root access Threat actors are actively exploiting critical vulnerabilities in Barracuda ESG appliances to achieve root access. Organizations using this hardware should prioritize patching and monitoring for signs of compromise. 🔗 https://t.co/UL1ZfXTO2t ━━━━━━━━━━━━━━━━━━━━ 🔍 Deep dive — for readers who want more context: 1. Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed A critical iOS sandbox escape vulnerability, tracked as worse_query, has been disclosed, potentially exposing sensitive data including cryptocurrency wallet seed phrases and private keys on iPhones running iOS 26 and 27. This exploit, published on GitHub by researcher forcequit, allows a malicious application to access files from other applications by leveraging an App Group container configuration. While no attacks have been reported, users are advised to exercise extreme caution with untrusted applications, update their iOS to the latest versions, and if a breach is suspected, migrate funds to a new wallet on a clean device and reset all login sessions. 2. SAP patches ICM2SHELL and PROXYGATE maximum severity flaws SAP has addressed critical vulnerabilities within its Intermediate Communication (ICM) module (ICM2SHELL) and its PROXYGATE component, both rated with maximum severity. These flaws, if exploited, could allow unauthenticated attackers to execute arbitrary code on affected SAP systems. The exploitation vector likely involves crafting specific network requests targeting the vulnerable ICM or PROXYGATE services. Organizations running SAP environments must prioritize immediate patching and rigorous vulnerability scanning to identify and remediate affected systems. 3. Beyond the Alert: The Case for Rich Network Data The effectiveness of security operations hinges on moving beyond initial alerts to embrace rich network data. While alerts signal a potential incident, understanding the full scope and nature of an attack requires comprehensive visibility into network traffic. Attackers may gain initial access but require further reconnaissance or lateral movement to achieve their objectives. Rich network data, encompassing flow data, packet captures, and endpoint logs, provides the context needed to detect and disrupt these subsequent stages. 4. Apple Patches iMessage Group Chat Privacy Flaws and Bluetooth Pairing Vulnerabilities Apple has released security updates addressing critical vulnerabilities affecting iMessage and Bluetooth pairing. One iMessage flaw (CVE-2026-113961) could permit a remote attacker to join a group chat and receive its messages, while another (CVE-2026-113960) allowed new participants to access messages sent before their addition. Additionally, vulnerabilities in the Brotli compression library, which was added to CISA's Known Exploited Vulnerabilities catalog, have been patched. Users of affected iPhone, iPad, and Apple Watch models should apply the latest updates immediately. 5. Hackers now exploit critical Barracuda ESG flaws to gain root access Critical vulnerabilities have been discovered and are actively being exploited in Barracuda's Email Security Gateway (ESG) appliances, allowing attackers to gain root-level access. The specifics of the exploit chain are not fully detailed, but the impact suggests a severe compromise of the affected network infrastructure. Organizations utilizing Barracuda ESG appliances must immediately apply available patches or implement mitigation strategies as outlined by Barracuda. Continuous monitoring of ESG appliance logs for suspicious outbound connections, unusual file modifications, or unexpected process execution is paramount. ━━━━━━━━━━━━━━━━━━━━ 📖 Full briefing, with sources: https://t.co/SiSdaGzjJ4 #forcequit #Binance #iOS #SandboxEscape

— CheckLeaked.cc (@checkleaked) November 10, 2026

ويمكن للمستخدمين تثبيت التحديث عبر الإعدادات ثم "عام" ثم "تحديث البرامج"، كما قد تظهر للمستخدمين رسالة تطلب تثبيته، أو يتم تثبيته تلقائيا على الأجهزة المفعّلة فيها هذه الخاصية.

يذكر أن بعض تحديثات "آبل" الأخيرة حملت إضافات أكبر، إذ أضاف إصدار "iOS 27.2" السابق مجموعة من التحسينات، بينها قدرة Siri على تذكر المحادثات السابقة، إلى جانب تعديلات على تطبيقي "Messages" و"Photos". 

@BINANCE ISSUES A SECURITY ALERT FOR IPHONE USERS! 📱⚠️ Binance has warned about a potential security vulnerability in iOS, the operating system used by iPhones, which could put users' sensitive data at risk, including information used to manage cryptocurrencies. 🔐 ⚠️ WHAT IS THE DANGER? The reported vulnerability could allow malicious applications to bypass certain iOS security protections and access information that would normally remain isolated. Potentially exposed data includes: 🔻 #Crypto wallet private keys. 🔻 Seed phrases stored on the device. 🔻 Login credentials and other sensitive information. 🛡️ HOW CAN YOU PROTECT YOURSELF? ✅ Update iOS to the latest available version immediately. ✅ Avoid installing applications from untrusted sources. ✅ NEVER store seed phrases or private keys in your phone's photos or notes. ✅ For substantial cryptocurrency holdings, consider using a hardware wallet such as Ledger. 💡 REMEMBER: THE SECURITY OF YOUR CRYPTOCURRENCIES ALSO DEPENDS ON THE SECURITY OF THE DEVICES YOU USE! 🚨🍎 BINANCE ISSUES A SECURITY ALERT FOR IPHONE USERS! 📱⚠️ Binance has warned about a potential security vulnerability in iOS, the operating system used by iPhones, which could put users' sensitive data at risk, including information used to manage cryptocurrencies. 🔐 ⚠️ WHAT IS THE DANGER? The reported vulnerability could allow malicious applications to bypass certain iOS security protections and access information that would normally remain isolated. Potentially exposed data includes: 🔻 Crypto wallet private keys. 🔻 Seed phrases stored on the device. 🔻 Login credentials and other sensitive information. 🚨 WARNING: THIS IS NOT A CONFIRMED ATTACK ON BINANCE, BUT A POTENTIAL IPHONE SECURITY ISSUE! At present, there are no confirmed reports of cryptocurrency theft resulting from this specific vulnerability. 🛡️ HOW CAN YOU PROTECT YOURSELF? ✅ Update iOS to the latest available version immediately. ✅ Avoid installing applications from untrusted sources. ✅ NEVER store seed phrases or private keys in your phone's photos or notes. ✅ For substantial cryptocurrency holdings, consider using a hardware wallet such as Ledger. 💡 REMEMBER: THE SECURITY OF YOUR CRYPTOCURRENCIES ALSO DEPENDS ON THE SECURITY OF THE DEVICES YOU USE! #Binance #Apple #iPhone #Crypto #Cybersecurity #LSMasterTradingSystem

— Lukas 🚀🚀🚀 (@CryptoSignal555) November 10, 2026

اقرأ أيضاً: تحذير عاجل لمستخدمي "آيفون": احتيال جديد يهدد بسرقة البيانات الشخصية