One-tap iMessage attack on iOS 26.5 exfiltrates messages via booby-trapped PDF

Kyrannio · x · 2026-10-17

Security researcher Calif demonstrated one-tap attacks against Signal and iMessage on iOS: on iOS 26.5, opening a booby-trapped PDF in iMessage executes code on the iPhone and sends the device's messages to an external server. Details and exploit code will be released "in due time." The quoting poster joked that flip phones are coming back.

Original post →

More from Safety

Safety channel →