Today’s macOS updates fix security gap involving eMudhra certificates

9to5mac.com Nov 9, 2026

Today’s macOS updates fix security gap involving eMudhra certificates

Curated by Shubham · TechCapsules · Nov 9, 2026

AI-summarised brief · reviewed before publication

Apple released macOS updates that close a security gap involving compromised eMudhra certificates. Earlier this year Mozilla disclosed that private keys for eight eMudhra intermediate CAs had been stolen, allowing attackers to forge certificates and spoof websites. Apple responded by automatically blocking the certificates in Safari, Mail and other system frameworks on Oct. 19 and Oct. 23, but command‑line tools such as curl and git remained vulnerable. Today’s patches – macOS 27.2.1, 26.7.3 and 15.8.3 – extend the block to those tools and remove five root CAs from /etc/ssl/cert.pem, including three additional eMudhra roots. The updates also provide administrators with the SHA‑256 fingerprints of the 12 affected certificates and continue to offer manual remediation guidance for systems that cannot install the update today.

💡 Why It Matters

· Sealing the loophole in command‑line utilities stops attackers from leveraging forged eMudhra certificates in automated scripts and development pipelines.

Apple Capsules

Read full article on 9to5mac.com

Apple Creator Studio users can pay for higher Apple Intelligence usage limits

Apple has introduced a paid “Intelligence usage pack” for Creator Studio subscribers who exceed the built‑in limits of its AI‑driven features. The $49.99 one‑time purchase, first visible in Logic Pro’s beta usage window, adds extra capacity to generate images, shapes, slide decks and presenter notes beyond the monthly allotment of 50 images, 250 shapes, 50 presentations or 700 notes. The pack rolls over unused credits, expires after 12 months, and is tied to the purchaser’s iCloud account without Family Sharing. Availability is limited to the United States, Canada, the United Kingdom, Brazil, France, Germany, India and Mexico. Apple’s move marks a shift from its previously free‑access model for AI tools across Keynote, Pages, Numbers, Freeform and Pixelmator Pro in its ecosystem.

💡 By monetizing excess AI usage, Apple signals that its generative tools have matured into revenue‑generating services, forcing creators to budget for advanced productivity features.

appleinsider.com · Nov 9

Unauthorized Bluetooth pairing & iMessage snooping patched in iOS 27.2.1

Apple released iOS 27.2.1 on Monday, two weeks after iOS 27.2, delivering a focused security‑only update. The patch closes CoreUtils flaws that let malicious Bluetooth devices pair with iPhones and bypass the pairing‑code limit, and it adds stricter state management to stop similar AirPlay pairing exploits. A use‑after‑free bug that could corrupt process memory was also fixed with improved memory handling. In iMessage, the update removes vulnerable code that allowed attackers to infiltrate group chats and read prior messages, correcting an authorization weakness. Additional fixes address an App Intents permission flaw and a Brotli out‑of‑bounds write that could cause memory corruption. Apple lists all changes on its website and urges all users to install the update.

💡 By sealing the Bluetooth and iMessage loopholes, Apple thwarts a class of silent, cross‑device attacks that could compromise personal communications and device integrity.

appleinsider.com · Nov 9

Action-packed Apple Pay ad drops, directed by Edgar Wright

Edgar Wright, the director famed for “Baby Driver” and “Shaun of the Dead,” helmed Apple’s newest commercial, turning a payment‑service showcase into a high‑octane action short. The spot follows a lone hero who, amid a chaotic fight, repeatedly taps Apple Pay to purchase weapons and gadgets, each transaction flashing on a teller’s screen in sync with the rapid cuts. Wright’s trademark rhythmic editing and kinetic camera work frame the payments as both plot devices and visual beats, emphasizing the service’s speed and security. The ad culminates with the protagonist disabling his foes using the last Apple Pay purchase, underscoring the brand’s message that the technology can be as decisive as any weapon. The commercial debuted online and on television this week, drawing attention for its cinematic flair and brand‑centric storytelling.

💡 By marrying blockbuster‑style direction with a fintech product, Apple transforms a routine transaction into a memorable spectacle, reinforcing its ecosystem’s appeal through pop‑culture credibility.

9to5mac.com · Nov 9

Leak reveals details for more iPhone 18 models launching early 2027

Apple is slated to launch three new iPhone models—iPhone 18, iPhone 18e and iPhone Air 2—in early 2027, according to a recent leak shared on Weibo by Fixed Focus Digital. The leak, verified by multiple sources, shows both the iPhone 18 and 18e will share a single battery, a cost‑saving measure that also benefits users. Both devices will be powered by the upcoming A20 chip, promising efficiency gains that allow larger batteries without increasing size. The iPhone 18e is expected to feature a 6.3‑inch display and replace the traditional notch with Apple’s Dynamic Island, marking the first time the company would pair that screen size with the new UI element. The models aim to address the AI‑driven memory crisis by using a common manufacturing process, keeping prices lower than flagship offerings.

💡 By unifying hardware across budget models, Apple can mitigate supply‑chain strain while expanding affordable options for consumers craving premium performance.

appleinsider.com · Nov 9

iPhone 18e will have the same larger battery as the iPhone 18

A leaker identified as Fixed Focus Digital posted a schematic that allegedly compares the internal layouts of Apple’s upcoming iPhone 18 and iPhone 18e. The diagram shows both models sharing a battery capacity range that tops out at 4,430 mAh, suggesting they may use the same battery pack. While the two phones differ in camera modules and display specs, the leaker also claims many components will be interchangeable, including the processor. The schematic lists a lower bound of 3,671 mAh for the iPhone 18 (“Taycan”) and 4,005 mAh for the iPhone 18e (“Nevera”), reflecting regional variations such as the presence of a physical SIM slot. The report reinforces earlier speculation that the iPhone 18 series will be more similar than distinct, though the leaker’s credibility remains mixed.

💡 Identical batteries could streamline production and reduce costs, giving Apple a pricing edge while offering consumers comparable endurance across the two models.

9to5mac.com · Nov 9

Apple now sells ‘innovative’ game controller play pad and 20+ more accessories

Apple has refreshed its third‑party accessories catalog for the holiday season, adding 24 items that span gaming, filmmaking, power, and everyday use. The headline product is the $199.95 GAMR Active Game Controller, a pressure‑sensitive play pad with nine Bluetooth‑connected zones that emulate directional sticks and A‑B‑X‑Y buttons across iPhone, iPad, Apple TV, Mac and Vision Pro, and includes a free app with original titles. Apple also introduced the $169.95 ShiftCam ProRig Filmmaker Kit, a titanium‑finished frame with interchangeable iPhone‑specific mounts, Bluetooth shutter, cold‑shoe slots and accessory points for lights and microphones. Smaller additions include the $39.95 ShiftCam SnapPocket Light 2 magnetic ring light, two Belkin power banks (UltraCharge Pro 20K and BoostCharge Slim 5K), a MOFT MagSafe wallet‑stand, and various cases and bags for iPad, MacBook, and iPhone. The full lineup is available on Apple’s website.

💡 By bundling niche, high‑performance peripherals with Apple’s ecosystem, the company is turning its retail platform into a one‑stop shop for creators and gamers, driving accessory revenue and deepening device lock‑in.