Threat Brief — 2026-09-02 — Firefox tracking and iPhone kernel exploit

Executive summary

Today's fresh feed is thin on actionable threat intelligence. The most notable items are a privacy concern in Firefox where clearing browsing history does not erase a persistent digital profile, and an iPhone kernel exploit delivered via a ordinary webpage that steals cryptocurrency and passwords — the latter was first surfaced today but has not yet been featured in this brief.

Top items

• Firefox retains non-removable user-behaviour profile even after history clearing. A recent Firefox update reportedly packages a persistent "digital fingerprint" of browsing habits that survives history deletion. This raises privacy and tracking concerns for users who rely on history clearing as a privacy control. (src: securitylab.ru)
• iPhone kernel exploit delivered via a normal webpage steals crypto and passwords. A vulnerability exploitable through an ordinary web page was used to compromise the iPhone kernel and exfiltrate cryptocurrency and credentials. This was first reported today and has not been featured in this brief previously. (src: securitylab.ru)

Themes

Both items highlight how trust in built-in privacy and security controls can be misplaced: Firefox users who clear history may still be tracked, and iPhone users visiting a routine webpage can be kernel-compromised. The common thread is the gap between user expectation of safety and the technical reality.