iPhone and Chrome browser users received fresh software updates on the same day after Apple and Google moved to close security vulnerabilities on two of the most widely used platforms among cryptocurrency holders. The simultaneous releases, which landed on the same day by coincidence, are the latest patches in a year in which exploit kits and wallet drainers have repeatedly targeted the devices of crypto users.

Google patches exploited Chrome zero-day

According to the Chrome Releases blog, Google pushed out nine security fixes in its latest update for Windows, Mac and Linux.

One of the flaws addressed, CVE-2026-125350, was already being exploited. Google acknowledged as much in a November 6 response to an anonymous report, writing that it "is aware that an exploit for CVE-2026-125350 exists in the wild." A zero-day is, by definition, a flaw exploited before a fix exists, which means protection only arrives once the patched version reaches each user's device.

The security update will roll out to users over the next few days, with some reaching users over the following weeks. Google urged Chrome users to restart their browsers, noting that most browsers install updates at launch.

Apple releases iOS 27.2.1 for iPhones

iPhone users with an iPhone 11 or later received iOS 27.2.1 on November 9. Apple also released iPadOS 27.2.1 for the iPad on the same day.

The patch fixes flaws in Messages, Bluetooth and App Intents. One of them, CVE-2026-113961, could allow an attacker to remotely join and read chats in iMessage groups. Another flaw in App Intents, CVE-2026-113963, could let attackers access sensitive user information. As with the Chrome release, the protections apply only once devices are actually updated.

Unlike the Chrome case, none of the flaws Apple fixed have been described as exploited in the wild. Apple's support pages clarify that the iPhone maker does not disclose the details of a flaw until it ships a fix.

Crypto users remain in the crosshairs

The patches published by Google and Apple carry major stakes for crypto holders, who have been under siege this year. The same-day releases sit inside a security cycle that has shaped the year: platform vendors withhold technical details until fixes ship, research teams such as GTIG, Censys and SlowMist document exploitation in the field, and wallet providers translate those findings into protective guidance for their users.

Attackers have been using the DarkSword exploit chain to steal information from cryptocurrency wallet apps and other personal data since at least November 2025. The flaw disclosed by Google's Threat Intelligence Group (GTIG) in March spread to iPhones running iOS 18.4 through 18.7 using six vulnerabilities.

A Censys report found servers pairing DarkSword and Coruna to steal data and recovery phrases from wallet apps including Coinbase, MetaMask, OKEx, Phantom and Trust Wallet as of early October. The update to iOS 26.3 closed the hold that DarkSword attackers had been exploiting.

Attackers continue to build exploit routes to reach crypto users even as developers patch existing software flaws. One such route, identified by SlowMist and OKX, implicated the FomoPeek iOS app in the theft of roughly $580,000 in crypto. A supply chain incident at Trust Wallet led to losses of more than $6 million in December 2025, as Cryptopolitan reported at the time.

In a November 6 blog post, Trust Wallet urged iPhone owners, particularly those who have not updated to version iOS 18.7, to install the latest iOS. The wallet provider also advised iPhone users to update their devices, enable Lockdown Mode if an update is not possible, and avoid storing recovery phrases as photos or in notes apps, since exploits are already known to look for such files on devices.

For now, the vendors' own channels — the Chrome Releases blog and Apple's support pages — remain the definitive sources for further detail on both sets of fixes.