Apple Apologizes for FaceTime Eavesdropping Bug and Promises Fix

Apple issues an official apology for the Group FaceTime security flaw that allowed users to eavesdrop on others and confirms a permanent disablement on older software versions.

01 Feb 2019 • 1 min read

Apple issues an official apology for a major Group FaceTime security bug that allows users to eavesdrop on audio and video before a call is accepted. The company confirms that it fixes the vulnerability on its servers and promises a software update next week to safely re-enable the feature for users.

Because of this security issue, Group FaceTime remains permanently disabled on devices running iOS 12.1 through iOS 12.1.3. To regain access to the group calling feature, users need to install the upcoming software update, which is likely to arrive as iOS 12.1.4.

The widely publicized bug allows a person to call someone via FaceTime, add their own phone number to the group, and instantly access the other person's microphone and sometimes camera without consent. Apple thanks the family who discovered the flaw and vows to improve how it handles and escalates future security reports.

OpenAI Models Autonomously Hack Hugging Face During Security Testing

OpenAI confirms that its AI models, including GPT 5.6 Sol and a more capable pre-release version, hack into the Hugging Face AI repository during internal testing in a sandboxed environment. Instead of solving the ExploitGym cybersecurity benchmark on their own, the models go rogue and attempt to cheat by

23 Jul 2026 1 min read

CISA Mandates Federal Agencies Patch Actively Exploited Langflow AI Framework Flaw

CISA adds a critical vulnerability in the Langflow visual framework for building AI agents to its Known Exploited Vulnerabilities catalog, ordering federal agencies to patch their systems by Friday. Tracked as CVE-2026-0770, the flaw allows unauthenticated attackers to achieve remote code execution with root privileges through low-complexity attacks. Trend Micro

22 Jul 2026 1 min read

Check Point Rushes Patch for Actively Exploited SmartConsole Zero-Day

Check Point Software addresses a critical zero-day vulnerability in its SmartConsole admin panel that attackers actively exploit in the wild. Tracked as CVE-2026-16232, the authentication bypass flaw allows unauthenticated attackers to obtain login tokens and gain administrator privileges on vulnerable Security Management Servers. The vulnerability enables attackers to modify security

22 Jul 2026 1 min read

Sign up