iOS sandbox escape 0day worse_query goes public, hits iOS 26/27
banteg · x · 2026-11-10
SlowMist issued a threat intel alert: a public PoC for iOS sandbox escape 0day "worsequery" (successor to badquery) now on GitHub, affecting iOS 26.0–26.7.2 and 27.2.
- Not a jailbreak but a container sandbox escape: a malicious app can reach system paths and read/modify other apps' data, breaking app isolation assumptions
- The bug doesn't steal assets by itself; real risk arises when sideloading untrusted apps — wallets storing seed phrases, keystores or WebView caches in plaintext are exposed
- Advice: avoid unknown IPAs, update iOS promptly, and wallet devs should not store sensitive data in plaintext
More from Safety
- Fable 5.2 system prompt leaked: 420,000+ characters, full text on GitHub — morgymcg · 2026-11-10
- UK man arrested after Facebook flags AI-generated photo he sent wife on Messenger — neurocy · 2026-11-10
- Retro-Terminal 'Dream Man' Slides Steal the Show at WIPO's IP and AI Forum — technollama · 2026-11-10
- LLMs don't report injected pain states: decodable in probes, silent in speech, alters behavior — Emilio Ferrara · 2026-11-10
- Fireworks AI breach exposed Notion AI chat sessions in <1% of workspaces — AccBalanced · 2026-11-10
- Anthropic-backed MAEM paper reads an AI's inner thoughts when it learns it will be deleted — belindazli · 2026-11-10