Update Dec. 14: This article, originally published on Dec. 13, has been updated to add expert comment on the flaws fixed in iOS 26.2, other updates issued alongside it, advice on spyware mitigation, as well as detailing why there was no iOS 26.1.1.

Apple has released iOS 26.2, along with a warning to update your iPhone now. That’s because iOS 26.2 fixes 26 flaws in Apple’s iOS software, two of which are already being used in real-life attacks.

Apple doesn’t provide much detail about what’s fixed in iOS 26.2, to give iPhone users as much time as possible to update before attackers can get hold of the details. But it does reveal that iOS 26.2 fixes two flaws in WebKit, the engine that underpins the Safari browser, that “may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26.”

Tracked as CVE-2025-43529 and CVE-2025-14174, the two already exploited issues fixed in iOS 26.2 are related. The first flaw could lead to arbitrary code execution, if a user interacts with maliciously crafted web content. “CVE-2025-14174 was also issued in response to this report,” Apple said on its support page.

Apple’s iOS 26. 2 also fixes a vulnerability in the iPhone Kernel, tracked as CVE-2025-46285, which could allow an app to gain root privileges.

If an attacker gains root access on a phone, they “effectively own it,” bypassing app sandboxes, reading messages and login codes and hijacking banking sessions, says Javvad Malik, lead CISO advisor at KnowBe4.

Criminals weaponise newly patched flaws quickly, he warns. “Users should update now from their phone’s settings — and not via links or popups — and encourage their friends and family to do the same.”

iOS 26.2 Comes As Apple Warns Of iPhone Spyware

The release of iOS 26.2 comes as Apple confirms its devices are being targeted by spyware. The iPhone maker sent out cyber threat notifications to users in at least 80 countries warning them that they are being targeted by the stealthy malware.

Spyware is extremely targeted and aimed at a certain subset of iPhone users, including dissidents, journalists and businesses operating in certain sectors. However, once it is on your device it can see and hear everything you do, even via encrypted apps such as WhatsApp.

How To Protect Yourself From Spyware

If you think you may have been hit by spyware, signs include overheating of your iPhone, a laggy device, or new apps suddenly appearing that you can’t recall downloading.

If this is the case, experts say the best thing you can do is ditch your iPhone altogether. However, the malware can be disrupted by turning your iPhone off and on again. Just know that this is temporary.

To prevent your device being hit by spyware, update first to iOS 26.2 to ensure you are on the most secure iOS version. You can also use tools such as Apple’s Lockdown Mode, while remaining vigilant of any unusual behavior on your iPhone.

iOS 26.2 Issued Alongside iOS 18.7.3 And More

Apple released iOS 26.2 alongside iOS 18.7.3, which itself fixes 22 flaws, including the two WebKit issues that have already been exploited in attacks. Apple says attacks targeted versions of iOS before iOS 26, which could mean iPhones on iOS 18.7.2 are vulnerable.

The fact that Apple has patched iOS 26 too indicates that the latest operating system is vulnerable, but attacks have not succeeded yet, perhaps because they are more difficult to perform.

Apple’s iOS 18.7.3 is available for the iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later.

Meanwhile, Apple released macOS Tahoe 26.2, macOS Sequoia 15.7.3 and macOS Sonoma 14.8.3 for Macs. The iPhone maker also issued tvOS 26.2 for Apple TV, watchOs 26.2 for Apple Watch, visionOS 26.2 for the Apple Vison Pro and Safari 26.2 for macOS Sonoma and macOS Sequoia.

Why Apple Let The Patch Wait Until iOS 26.2

As eagled-eyed iPhone security watchers may have noticed, Apple has waited until iOS 26.2 to issue this emergency update, rather than releasing iOS 26.1.1 as a security-only upgrade.

This is because Apple has already enabled a feature in iOS 26.1. called Background Security Improvements, which performs these updates on the fly. If you have upgraded to iOS 26.1 and enabled this feature, your iPhone will already be protected from this possible spyware attack.

This also explains why Apple is pushing iOS 26.1 as the update to choose, rather than iOS 18. If you have failed to update from iOS 26 to iOS 26.1, moving straight to iOS 26.2 is therefore a no-brainer.

Flaws Fixed in iOS 26.2 Could Be Part Of Wider Attack Chain

The issues fixed in iOS 26.2 could be part of a wider attack chain, says Darren Guccione, CEO and co-founder of Keeper Security. Attackers can chain together multiple flaws to bypass layers of device security, combining zero-days or exploiting overlooked weaknesses in critical components, he says. “WebKit, which is a fundamental element of every iPhone browser, continues to be a prime target because it sits at the intersection of web content and the operating system.”

When vulnerabilities like these are disclosed and patches are issued, timing matters, Guccione warns. “Once Apple issues a fix, details about the vulnerabilities quickly become public, giving attackers a roadmap to exploit any devices that have not yet been patched. The longer users wait, the greater the risk.”

WebKit flaws like the ones fixed in iOS 26.2 are especially dangerous because they “sit at the crossroads of user interaction, browser execution and the underlying APIs,” says Glyn Morgan, UK&I manager at Salt Security. “When WebKit flaws are exploited they can bypass controls and enable deep surveillance even on encrypted apps.”

The Kernel flaw fixed in iOS 26.2 is also serious because the Kernel “sits at the very core of the operating system,” says Jake Moore, global cybersecurity advisor at ESET. “If exploited, it could allow a malicious payload to escalate privileges, effectively breaking out of the normal app boundaries to gain higher level access.”

Bugs Squashed In iOS 26.2

As usual, Apple’s iOS 26.2 fixes several bugs in the iPhone software. According to Apple, iOS 26.2 fixes an issue where pre-release albums in the Apple Music library were not immediately playable at their release time, as well as a bug where a Privacy and Security setting may incorrectly be marked as managed by an enterprise organization.

Why You Should Update Your iPhone to iOS 26.2 Now

Apple’s iOS 26.2 also comes with a number of cool new features, many of which offer a boost to your iPhone’s security. In iOS 26.2, Apple will add improvements to Enhanced Safety Alerts.

Apple’s iOS 26.2 also adds new options for the controversial Liquid Glass feature, Podcast enhancements, offline lyric support in Apple Music, sleep score revisions, alarms for reminders and AirPods Live Translation in the EU.

It is notable that both WebKit issues patched in iOS 26.2 were exploited in versions before iOS 26, making it integral that you upgrade your iPhone now. As Apple has issued iOS 18.7.3 alongside iOS 26.2, you can still update your iPhone and fix the dangerous flaws if you prefer to stay on an older version.

While turning on automatic updates helps ensure you do receive iPhone security fixes quickly, it’s far better to check for upgrades such as iOS 26.2 and apply them yourself.

“If you’re waiting for a big old pop-up to tell you you’re exposed, stop," Rik Ferguson, VP security intelligence at Forescout advises. “’Saying, ‘I’ve got auto-updates on’ is not a guarantee of a quick resolution. The practical advice is pedestrian but effective — manually check for OS updates, manually update apps and don’t assume you’re covered just because you haven’t seen a prompt.”

Apple’s iOS 26.2 is available for the iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later.

So, what are you waiting for? Go to your Settings > General > Software Update and update to iOS 26.2 or iOS 18.7.3 now.

source

These emoji will likely land on your device in the spring.



Apple released iOS 26 in September, and while that update didn't include new emoji, a future iOS 26 update will bring eight new emoji to your iPhone. The Unicode Consortium approved eight emoji in September as part of Unicode 17.0. That means iPhones and Android devices will get new emoji in early 2026.

Here are the eight new emoji you can expect to see on your device in a few months:

   • Trombone

   • Treasure chest

   • Distorted face

   • Hairy creature (Sasquatch)

   • Fight cloud

   • Orca

   • Ballet dancers

   • Landslide

"These new emoji have long-standing symbolic meanings, are visually distinctive and contain multitudes of expression," the Unicode Consortium wrote online in July.

These emoji were proposed in November 2024, and an apple core emoji was also proposed at the time. However, according to Emojipedia, the apple core emoji was withdrawn from consideration before Unicode could approve it.

In 2024, the Unicode Consortium debuted new emoji in September 2024, including the face with bags under eyes and the splatter emoji. You can find those emoji now on your Android and iPhone devices, as well as across the internet.

Correction, July 18: An earlier version of this story incorrectly listed the number of emoji that had been approved for the Unicode 17.0 update. Unicode has since confirmed that eight emoji have been approved, including the Landslide emoji.

source

I learned the truth behind all the colors, and it's wild

Look closely, the colors on your USB ports reveal what they are capable of.

Have a USB device near you? Look closely at the port -- do you see a color? It turns out that it actually means something. There's a standardized color scheme that communicates information about that device's capabilities.

Mind blown? If you never noticed this, you're not alone. Most USB devices work fine on any compatible port, but they may not be optimized for optimal performance. For example, if you've noticed a mouse seems to work better in one port over another, it's not in your head. One probably supports USB 3.0, and the other doesn't.   

Despite the fact that they share a universal port shape, all USB-A and USB-C devices are not created equal, with potentially very different transfer speeds, power transfer, and generations on similar devices. Even two USB-C ports right next to each other on the same laptop could have very different capabilities when it comes to data transfer speed and power delivery.

Let's take a look at what they mean.

There are seven major color that indicate a device's generation and what kind of data transfer speeds you can expect. If you have a rare device with a color not listed here, let me know in the comments.

• Black: Denoting USB 2.0, this is the second most common you'll see on devices of all types, supporting speeds of up to 480 Mbps.

• White: These are first-generation devices -- USB 1.x -- with the slowest potential transfer speeds that don't typically exceed 12 Mbps. They're also some of the most common, found on devices that don't require data transfer or high power delivery.

• Yellow: These ports can support either USB 2.0 or 3.0, and are "always on", meaning they can supply power even when the device they're connected to is off.

• Orange: Like yellow, but with support for USB 3.0. Always on. You might see these on your pair of headphones. 

• Blue: Supporting USB 3.0 SuperSpeed technology and above, blue ports identify a device capable of fast data transfer: up to 5 Gbps (that's 5,000 Mbps) -- a significant jump from previous generations. Besides laptops, you'll see blue ports on thumb drives and external storage.

• Teal: Just like blue, but denoted as USB 3.1, supporting faster transfer speeds of up to 10 Gbps.

• Red: These are the newest and fastest devices available, categorized as USB 3.1 Generation 2 and USB 3.2. They support another significant increase in data transfer speeds -- up to 10-20 Gbps. Red USB ports are also always on.

The colors on your laptop's USB ports can also indicate at a glance what generation of USB technology it supports. For example, the Acer Chromebook Plus Spin 514 features two identical USB-A 3.2 ports, capable of transferring data at speeds of up to 5 Gbps. If your laptop's USB ports don't have a color, it simply means the manufacturer chose not to use a color for design or budget reasons.

When buying a new laptop, consider the speeds your USB ports support, as this is one aspect that most consumers tend not to investigate closely. Lower-priced or older laptops may have ports with more limited speeds, while newer laptops may forgo USB-A connectivity altogether in favor of faster USB-C ports.

In that vein, USB-C ports can also have their own colors, but they're a little more specialized. Most USB-C ports are differentiated between standard connectivity with USB 2.0 (common in older laptops, with speeds of up to 480 Mbps) and 3x, which supports speeds of up to 10-20 Gbps.

A step above standard USB-C are Thunderbolt ports, often marked with the Thunderbolt icon next to the port itself, which support speeds of up to 40 Gbps. These ports support some of the fastest USB transfer speeds available on the market, and you'll see them on high-end laptops.

USB 4 is one of the newest and most powerful technologies available, with select laptops currently supporting this technology. The MacBook Pro M4 is one such example, with speeds up to 120 Gbps. USB 4 and Thunderbolt ports are backward compatible, so they have no problem running slower devices when plugged in.

The bottom line

So what does all this mean for you? I recommend looking at your laptop's spec sheet to determine the differences (if any) between the USB ports on your laptop. If one of them is faster than the other, it will be specified, and you can expect better performance by connecting the right devices to the corresponding ports.

source

Generative AI (gen AI) and large language models (LLMs) are revolutionizing personal and professional lives. From supercharged digital assistants that manage email to seemingly omniscient chatbots that can communicate with enterprise data across industries, languages, and specialties, these technologies are driving a new era of convenience, productivity, and connectivity.

This book provides an introductory overview to LLMs and gen AI applications, along with techniques for training, tuning, and deploying machine learning (ML) models.

Highlights include:

   • Five steps to get started with generative AI

   • Understand important LLM concepts

   • Develop applications with user-friendly interfaces

   • Select an appropriate LLM

   • Recognize the importance of data governance

   • See how to orchestrate AI agents

How to get it

Follow this link to get your copy of Generative AI and LLMs for Dummies. This link will redirect you to my One Drive account and click Download. [system administrator]

source

Have I Been Pwned (HIBP) has added nearly 2 billion unique email addresses from a sprawling dataset of credential stuffing records, marking the largest single update in the platform's history.

The data, sourced and indexed by US-based threat intelligence firm Synthient, also includes 1.3 billion unique passwords, 625 million of which were previously unseen.

The newly integrated dataset, referred to as the Synthient Credential Stuffing Threat Data, significantly expands the reach of HIBP's exposure database. This follows an earlier October release of 183 million credential pairs from Synthient’s infostealer log collection, also indexed by HIBP. While that first batch stemmed from stealer malware infections, the new trove consists of credential stuffing lists, which aggregate login details from previously breached platforms and are reused by attackers to compromise other accounts.

Credential stuffing data is particularly dangerous because it allows attackers to exploit reused credentials across unrelated services. As HIBP founder Troy Hunt explains, a compromised password from a low-priority site, like a hobby forum, can become the “key to the castle” if reused on more sensitive services such as banking or email platforms.

Data source and validation

Synthient, a private cybersecurity intelligence startup, compiled this dataset by aggregating over 23 billion rows of threat data. Sources included Telegram channels, dark web forums, and Tor-based marketplaces where credential lists and stealer logs are traded or shared freely.

This second tranche includes 1,957,476,021 unique email addresses, significantly more than the first. Unlike stealer logs, which capture credentials as users enter them on infected systems, credential stuffing data typically comes from older breaches that are recombined and repackaged into new lists. These lists are used by attackers in automated login attempts to gain unauthorized access to user accounts across different services.

To validate the accuracy of the dataset, Hunt contacted selected HIBP subscribers whose credentials appeared in the list. Several confirmed that at least some of the passwords, ranging from decades-old to currently active, had indeed been used. In multiple cases, the exposed credentials were still in use on active accounts, underscoring the lingering risk posed by reused passwords.

No, Gmail was not breached

It is critical to clarify, especially amid widespread misreporting seen in the wake of previous Synthient-related disclosures, that this is not a Gmail breach, nor is it a compromise of any specific platform. Although Gmail addresses appear in the dataset (approximately 394 million of them), this simply reflects the scale of Gmail’s global usage, not a vulnerability in Google’s systems.

Google previously responded to similar reports, reaffirming that these exposures stem from malware-infected devices and third-party breaches, not flaws in Gmail itself. The presence of any domain in such datasets should not be conflated with a breach of that service.

In total, the newly added credential stuffing corpus spans 32 million unique email domains, with Gmail comprising just 20% of the total. The data spans many years and includes both long-compromised and never-before-seen credential pairs.

Users should check if their email address or password appears in this dataset by visiting haveibeenpwned.com, and resetting their passwords if the scan result comes back positive. In general, it is recommended to use a password manager to create strong, unique passwords for every site, and enable multi-factor authentication (MFA) on all critical accounts.

source