Apple Fixes Dyld Zero-Day in Targeted Spy Attacks

Apple fixes a critical zero-day in the dyld component with the release of iOS and iPadOS 26.3 on Feb. 11, following reports of active exploitation in targeted attacks. The vulnerability, tracked as CVE-2026-20700, enables attackers with memory-write access to execute arbitrary code by corrupting dyld’s internal state.

Google’s Threat Analysis Group identified the flaw, which Apple says was used in a highly sophisticated operation aimed at specific individuals running iOS versions prior to 26. The attack chain likely begins with system compromise via phishing or zero-click exploits, allowing hackers to manipulate dyld during dynamic library loading and escalate privileges.

This marks Apple’s first zero-day patch of 2026. The update fixes more than 40 issues, including kernel root escalations and lock screen bypasses. Apple fixes dyld using improved state validation to prevent memory corruption. Users should update immediately and enterprises must enforce security monitoring.

Read the full article: https://cybersecuritynews.com/apple-0-day-vulnerability-exploited/