Monday September 28, 2026 11:45 am PDT by Juli Clover
iOS 26.7.1, iPadOS 26.7.1, macOS Tahoe 26.7.1, and macOS Sequoia 15.8.1 address a major vulnerability that Apple believes was used against a small number of people.
Apple's security support pages say there was a CoreGraphics out-of-bounds write issue that could be exploited with a maliciously crafted file, allowing for arbitrary code execution. It has been fixed with improved bounds checking.
Apple says the flaw was exploited in an "extremely sophisticated attack" on targeted individuals running older versions of iOS. Apple's latest operating systems don't appear to be affected, and the iOS 27.0.1, iPadOS 27.0.1, and macOS Golden Gate 27.0.1 updates that came out today have no published CVE entries.
While the attack wasn't widespread, if you're still running a version of iOS 26, iPadOS 26, macOS Tahoe, or macOS Sequoia, you should install the new updates as soon as possible. Now that the vulnerability is public, it could be further exploited against users who aren't protected.
Popular Stories
Tuesday September 8, 2026 10:47 am PDT by Joe Rossignol
Apple today released iOS 26.6.2 with a fix for "an issue that prevents downloading a software update over a cellular connection." The minor software update is rolling out now for the iPhone 11 series and newer. To update your iPhone, open the Settings app and tap on General → Software Update. It might take a few minutes for the update to be visible to everyone. iOS 26.6.2 arrives...
Monday September 14, 2026 10:32 am PDT by Juli Clover
Alongside iOS 27, Apple today released iOS 26.7, an update to the existing iOS 26 software. Users who check for new software will see iOS 26.7 as the default update, with iOS 27 listed as an option at the bottom of the Software Update interface. According to Apple's release notes, iOS 26.7 includes security fixes, but it does not have any other features. Apple will eventually show iOS 27 ...
Monday September 14, 2026 11:36 am PDT by Juli Clover
Today's iOS 27 update addresses over 100 security vulnerabilities, which is a good reason to install the new software. If you don't want to update to iOS 27 yet, Apple also released iOS 26.7 with over 80 security fixes. 75 of the fixes are shared across both updates, so iOS 26.7 addresses many of the same issues. There are multiple kernel fixes, including one that could allow a malicious...
Instagram Engineering
Shopify Engineering