URGENT: Apple Confirms Critical 'Zero-Day' Bug in iOS 17 That Exposes Photos and Wallet Data

By Sarah Jenkins | Published November 10, 2026 at 08:45 AM PST
iOS Critical Alert Screenshot
Fig 1: The actual system alert triggered when the vulnerability is active.

SAN FRANCISCO — In an unprecedented move, Apple has confirmed a severe vulnerability in the latest iOS update that allows malicious websites to silently access user photo libraries, sensitive files, and even cryptocurrency wallet keys without permission.

The bug affects devices running iOS 16.5 and newer. Security experts believe the exploit utilizes a memory leak in the WebKit engine to bypass standard sandboxing rules, granting unauthorized read-access to the device's core storage.

⚠️ CRITICAL SECURITY WARNING

Researchers found that simply visiting a compromised webpage can trigger an automatic download of background data. Users are advised to disconnect from the internet immediately.

"It is frighteningly easy to trigger," said lead analyst Sarah Jenkins. "Users don't even need to click anything. Just loading the page initiates the data harvest."

While Apple works on a patch, users are recommended to check their device integrity using the official diagnostic tool below.

● 12,405 devices affected today