Apple users get urgent security warning over iPhone flaw Arjun Parashar Tue, November 10, 2026 at 3:31 PM EST 3 min read AAPL -0.47% Trade Apple on Coinbase Trading disclosure Trading disclosure The above button links to Coinbase. Yahoo Finance is not a broker-dealer or investment adviser and does not offer securities or cryptocurrencies for sale or facilitate trading. Coinbase pays us for certain activity generated through this link. Prices displayed are informational.
Binance, the world's largest cryptocurrency exchange by spot trading volume, has warned iPhone users against a security vulnerability. The warning came days after a cyberattack impacted billions of dollars in digital assets under the exchange's custody.
On Oct. 29, Binance suffered a massive cyberattack affecting approximately $6.34 billion in digital assets.
Now, it has flagged a separate security threat that could potentially expose private information of crypto users.
In a Nov. 10 warning, Binance alerted Apple users about an iOS vulnerability called worse_query, that could allow malicious applications to access files tied to other apps.
The researcher described the vulnerability as a "sandbox escape," meaning a malicious application could bypass security barriers designed to prevent apps from accessing each other's data.
A malicious app using the flaw could potentially expose crypto wallet recovery phrases, private keys and login credentials if those files are accessible on an affected device.
Democrats' sweep sends Trump-linked assets reeling
Bitcoin, stocks crash in steepest selloff since Liberation Day
Circle crushes Q3 estimates as staff shrinks 5%
The reach of this threat is estimated to be wide, given that roughly one in four active smartphones worldwide is an iPhone.
Binance says the flaw is an iOS-level issue, not one unique to its app. The risk to any user depends on a malicious app reaching their device and finding such files accessible.
According to a researcher's GitHub repository, the vulnerability seems to affect a broader range of iOS versions, although the published proof of concept requires additional configuration to work.
Neither Binance nor the researcher, as of now, has reported attacks or thefts involving the vulnerability, and no specific wallet application has been identified as exposed, as per The Hacker News.
Binance advised users to remove applications downloaded from untrusted sources and install official iOS and app updates.
Users who suspect their devices have been compromised should create new wallets on clean devices, transfer their assets and reset active login sessions.
Meanwhile, Apple released iOS 27.2.1 and iOS 26.7.3 on Nov. 9, addressing several security issues. Apple's release notes, however, do not confirm whether either update fixes the worse_query vulnerability.
The attack on Binance earlier, that was brought to light by the company earlier last week, involved compromised employee computers.
Through these computers, the attackers managed to access the exchange's internal wallet-signing service and initiate unauthorized transactions.
Binance said it had set aside more than enough funds to cover the loss and would absorb the financial impact. As of its Nov. 3 report, approximately $2.85 billion in assets had been frozen or intercepted, subject to reconciliation and market price changes.
If you follow our market coverage, don't miss the Roundtable 100. Updated every Friday, it's a power ranking of the 100 most investable tech stocks, including digital assets. Check out the latest RTB 100 rankings at roundtable100.com.
Related: Binance hackers turn to Elon Musk memecoins to hide $6.3 billion
This story was originally published by TheStreet on Nov 10, 2026, where it first appeared in the Technology News section. Add TheStreet as a Preferred Source by clicking here.
