Apple and Google Patch Fresh Holes as Crypto Wallet Attacks Pile Up

Apple and Google pushed out security patches on the same day, a coincidence that lands at an awkward moment for anyone holding crypto on a phone or a laptop. Google shipped nine fixes in its latest Chrome update for Windows, Mac and Linux. Apple rolled out iOS 27.2.1 for iPhone 11 and later on November 9, alongside iPadOS 27.2.1 for iPad.

Google's update covers a flaw it admits is already being used against people. In a November 6 response to an anonymous report, the company said it "is aware that an exploit for CVE-2026-125350 exists in the wild." The patch will reach users over the next few days, with some waiting weeks, and Google told Chrome users to restart their browsers since most install at launch.

Apple's fixes touch Messages, Bluetooth and App Intents. One bug, CVE-2026-113961, could let an attacker remotely join and read chats on iMessage groups. Another, CVE-2026-113963 in App Intents, could hand attackers access to sensitive user data. Apple did not describe any of the flaws as exploited in the wild, and its support pages note the company stays quiet on a flaw's details until a fix ships.

Crypto holders have been the target all year. Attackers have used the DarkSword exploit chain to pull data from cryptocurrency wallet apps since at least November 2025, according to Google's Threat Intelligence Group, which disclosed the flaw in March. It spread to iPhones on iOS 18.4 through 18.7 using six vulnerabilities. A Censys report found servers pairing DarkSword with Coruna to steal data and recovery phrases from wallet apps including Coinbase, MetaMask, OKEx, Phantom and Trust Wallet as of early October. The iOS 26.3 update closed the opening DarkSword attackers were using.

New routes keep opening while old ones close. SlowMist and OKX tied the FomoPeek iOS app to the theft of roughly $580,000 in crypto, and a supply chain incident at Trust Wallet cost more than $6 million in December 2025. In a November 6 blog, Trust Wallet urged iPhone owners — especially anyone not yet on iOS 18.7 — to install the latest iOS, switch on Lockdown Mode if they can't update, and keep recovery phrases out of photos and notes apps, because exploits already hunt for those files.