Unpatched exploit allows malicious iOS apps to steal data
appleinsider.com Nov 11, 2026

Unpatched exploit allows malicious iOS apps to steal data

AI-summarised brief · reviewed before publication

Binance warned iPhone users on November 10 that a vulnerability named “worse_query” in iOS 26.7.1, 27.0.1, and 27.2 allows malicious apps to escape sandbox boundaries and read local files from other apps. The flaw could expose seed phrases, private keys, and login credentials across the Apple ecosystem. Binance urged users to remove untrusted apps, update iOS and apps to the latest official releases, and transfer funds to a new wallet if a breach is suspected. Apple has not yet patched the issue.

💡 Why It Matters

  • · The exploit threatens the core security model of iOS, potentially compromising sensitive data in any app, not just Binance.
  • · Swift action is required to protect users’ digital assets.