Loading story…
Apple released iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2 with security fixes for supported iPhone, iPad, and Mac devices. The updates are available through the standard software update mechanisms, including over-the-air installation on mobile devices and System Settings > Software Update on Macs, and Apple described them as minor releases focused on security.
The Canadian Centre for Cyber Security said Apple’s advisories cover vulnerabilities affecting iOS and iPadOS versions prior to 26.5.2 and macOS Tahoe versions prior to 26.5.2. Neither Apple’s release notes nor the cited reports disclosed specific CVE identifiers or exploitation details, but the Cyber Centre urged users and administrators to review Apple’s security documentation and apply the updates promptly.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
7 events from the most recent confirmed update back to the earliest known activity.
In Apple’s June 29, 2026 security advisory for iOS and iPadOS 26.5.2, Apple credited Milad Nasr and Nicholas Carlini with Claude at Anthropic for reporting CVE-2026-43715, a WebKit use-after-free flaw that could allow malicious web content to cause memory corruption. Apple said the issue was fixed through improved memory management.
In Apple’s June 29, 2026 security content for iOS and iPadOS 26.5.2, Apple credited OpenAI Codex Security with reporting three WebKit flaws: CVE-2026-43707, CVE-2026-43716, and CVE-2026-43745. The issues were described as a type confusion leading to memory corruption and two out-of-bounds flaws that could crash Safari.
Reuters, as cited by MacRumors, reported that Apple released iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2 earlier than planned, pulling more than 25 security fixes forward from the 26.6 update cycle. Apple reportedly made the move out of concern that artificial intelligence could speed development of malicious hacking tools, while saying it had no evidence the patched flaws were actively exploited.
Apple released Safari 26.5.2 for macOS 15 Sequoia and macOS 14 Sonoma as part of its 26.5.2 security updates. The update primarily addressed WebKit vulnerabilities, and the report said Apple did not indicate any of the flaws had been exploited in the wild.
Apple published security advisories covering vulnerabilities affecting iOS and iPadOS versions prior to 26.5.2 and macOS Tahoe versions prior to 26.5.2. The Canadian Centre for Cyber Security urged users and administrators to review the advisories and apply the updates.
Apple released macOS Tahoe 26.5.2 as a small update to the macOS Tahoe operating system and said the release includes security fixes for Mac devices.
Apple released iOS 26.5.2 and iPadOS 26.5.2 as minor updates for its mobile operating systems, stating that they include security fixes for iPhone and iPad devices.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
17 references tracked. Mallory keeps watching after this page renders.
zdnet.fr
Open sourcethecyberexpress.com
Open sourceisc.sans.edu
Open sourceghacks.net
Open sourcemacrumors.com
Open sourcetidbits.com
Open sourcemacrumors.com
Open sourcesupport.apple.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Apple released a comprehensive set of security updates for its major operating systems and applications, including iOS 26.1, iPadOS 26.1, macOS Tahoe 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, tvOS 26.1, watchOS 26.1, visionOS 26.1, Safari 26.1, and Xcode 26.1. The updates address 110 vulnerabilities, several of which involve memory corruption issues in components such as ImageIO, FontParser, and WebKit, potentially allowing remote code execution. Other vulnerabilities could allow unauthorized access to sensitive user data through components like Spotlight, CoreMedia, MallocStackLogging, Admin Framework, sudo, Security, SoftwareUpdate, and AppleMobile. None of the vulnerabilities were reported as actively exploited at the time of release, and Apple provided limited technical details in its advisories. Security authorities, including the Canadian Centre for Cyber Security, have urged users and administrators to promptly apply these updates to mitigate potential risks. The updates are considered routine but critical, given the breadth of affected products and the potential impact of the vulnerabilities. Users are advised to review Apple's official security update documentation and ensure all devices are updated to the latest versions to maintain security and privacy protections.
Jun 29, 2026
Apple released iOS 26.1 and iPadOS 26.1, delivering critical security updates for a wide range of supported iPhone and iPad models. The updates address multiple vulnerabilities, including flaws in the Neural Engine that could allow malicious apps to crash system components or corrupt kernel memory, and weaknesses in Apple Account privacy controls that previously allowed unauthorized screenshot capture of sensitive data. Additional fixes strengthen sandbox enforcement and file integrity controls, reducing the risk of unauthorized data access or privilege escalation by malicious applications. Apple maintains its policy of withholding vulnerability details until patches are available, emphasizing the importance of timely updates for all eligible users. The company is also preparing for future releases, with iOS 26.2 expected to introduce new features such as digital passport support and RCS encryption, further enhancing both security and privacy for its user base.
Jul 12, 2026
Apple released broad security updates for its platforms, including **iOS**, **iPadOS**, **macOS Sequoia 15.4**, **Safari**, **tvOS**, and **visionOS**, fixing a total of 213 vulnerabilities. The updates addressed 77 flaws in iOS and iPadOS, 123 in macOS Sequoia, and 13 in Safari, with impact ranging from **sandbox escape** and **privilege escalation to root** to **arbitrary file deletion**, **kernel-level code execution**, and **WebKit memory corruption**. Apple also issued fixes for older supported operating systems, backporting patches for vulnerabilities that had been disclosed and reportedly exploited in recent months, including **`CVE-2025-24200`**, **`CVE-2025-24201`**, and **`CVE-2025-24085`**. The company recommended upgrading devices to at least **iOS 15.8.4, 16.7.11, and 18.4**; **iPadOS 15.8.4, 16.7.11, 17.7.6, and 18.4**; and **macOS Ventura 13.7.5, Sonoma 14.7.5, and Sequoia 15.4** to reduce exposure.
Jul 24, 2026