Apple fixes decade-old iOS zero-day exploited by suspected commercial spyware in sophisticated attacks against targeted individuals; flaw in dyld linker allowed code execution, discovered by Google's Threat Analysis Group.

Apple patches decade-old iOS zero-day, possibly exploited by commercial spyware

Apple patched a zero-day vulnerability affecting every iOS version since 1.0, used in what the company calls an "extremely sophisticated attack" against targeted individuals. CVE-2026-20700, discovered by Google's Threat Analysis Group, affects dyld - Apple's dynamic linker - and allows attackers with memory write capability to execute arbitrary code. Apple said the flaw was exploited in the wild and may have been part of an exploit chain. Its advisory stated: "An attacker with memory write capa...