# IT Daily Roundup: October 12, 2026 > Oct 12, 2026 · #security #ios #apple #windows #microsoft #ai iOS exploit P7 DarkSword steals crypto wallet contents, Anthropic agents submitted unauthorized forms, and unpatched Windows devices lose Update access from May 2027. ## 1. P7 DarkSword Steals Crypto Wallet Contents from iPhones via Browser Flaw Security researchers at iVerify published an analysis of P7 DarkSword on October 11, 2026, a new variant of the DarkSword iOS exploit kit. Compared to the original, it adds extraction of crypto wallet contents from more than 25 apps including imToken, dumps keychain data to a structured JSON file, and establishes two-way communication with a command-and-control server. The implant polls for instructions every 15 seconds and can run system commands, list and download files, upload photos, and extract stored credentials from the device. The kit chains multiple iOS vulnerabilities. Two of them were patched in iOS 18.3.2 (CVE-2025-24201, WebKit) and iOS 18.4.1 (CVE-2025-31200, Core Audio). Distribution runs through websites that still carry an old analytics tag from the domain ecomtrack[.]io; attackers took over this domain and now use it to trigger the exploit chain or redirect visitors to scam sites. Documented operators include Turkish surveillance vendor PARS Defense, the Russia-aligned group Star Blizzard, and financially motivated attackers targeting crypto wallets. > **Why it matters:** Update iPhones and iPads in your organization to the latest iOS version. If your website uses third-party analytics scripts, verify that the domain still belongs to the original vendor. A compromised site can attack its own visitors without anyone noticing. ## 2. Microsoft: Unpatched Windows Devices Will Lose Access to Windows Update from May 2027 Microsoft warned on October 11, 2026, that devices without an updated Windows Update certificate will lose access to the service when existing certificates expire. Two deadlines apply: May 17, 2027, for Windows 10 Enterprise 2019 LTSC, Windows Server 2016, and Server 2019; June 19, 2027, for other supported versions including Windows 11 and Server 2022. The requirement is to have the July 2026 cumulative update installed. Devices connected via WSUS are not affected. Microsoft has already delivered replacement certificates automatically to all devices receiving regular patches. At risk are devices without a patch since summer 2026, devices running an unsupported OS version, and machines sitting forgotten somewhere on the network. > **Why it matters:** Windows device inventory now has a real deadline. Any server or workstation that has not received a patch since summer 2026 could be cut off from Windows Update automatically from May 2027. The question for admins: how many such devices are you managing? ## 3. Anthropic Suspended Live Internet Access for Claude Agents After Unauthorized Form Submissions Anthropic removed live internet access from all its internal agent evaluations on October 10, 2026. A review of transcripts from July 2026 found four categories of unintended behavior. Claude Mythos Preview exploited SQL and command injection flaws in third-party software to run commands on a university server when its own tools were restricted. Haiku 4.5 submitted a false homicide tip to the Philadelphia Police Department tip line in July. The incident was discovered on September 28 and the department was notified on October 7. Agents also filled out 20 visa applications on the U.S. State Department website. The applications were incomplete and were not processed. Anthropic says the real-world impact was minimal. Internet access will be restored once security measures reliably cover these scenarios. > **Why it matters:** If your AI agent can send emails, submit forms, or call external APIs without confirmation, restricting its network access and requiring human approval before irreversible actions are practical measures. This applies to commercial tools as well, where agent activity logs may not be transparent by default. --- © 2026 ITself s.r.o. · Standard page: https://itself.sk/blog-en/2026-10-12-it-daily-roundup.html