Loading story…
Apple released broad security updates for its platforms, including iOS, iPadOS, macOS Sequoia 15.4, Safari, tvOS, and visionOS, fixing a total of 213 vulnerabilities. The updates addressed 77 flaws in iOS and iPadOS, 123 in macOS Sequoia, and 13 in Safari, with impact ranging from sandbox escape and privilege escalation to root to arbitrary file deletion, kernel-level code execution, and WebKit memory corruption.
Apple also issued fixes for older supported operating systems, backporting patches for vulnerabilities that had been disclosed and reportedly exploited in recent months, including CVE-2025-24200, CVE-2025-24201, and CVE-2025-24085. The company recommended upgrading devices to at least iOS 15.8.4, 16.7.11, and 18.4; iPadOS 15.8.4, 16.7.11, 17.7.6, and 18.4; and macOS Ventura 13.7.5, Sonoma 14.7.5, and Sequoia 15.4 to reduce exposure.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
Apple published its security advisory for macOS Sequoia 15.4 on its support site. The advisory documents the security content of the release.
Apple released security updates for iOS, iPadOS, macOS, Safari, tvOS, and visionOS, fixing 213 vulnerabilities in total. The updates included 77 flaws in iOS and iPadOS, 123 in macOS Sequoia, and 13 in Safari, and Apple also backported fixes for previously exploited vulnerabilities to older supported versions.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Apple released a wide-ranging set of security updates across **iOS**, **iPadOS**, **macOS Tahoe**, **watchOS**, **tvOS**, **visionOS**, **Safari**, and **Xcode**, addressing more than 85 vulnerabilities across core components including the kernel, WebKit, AirPlay, Keychain, and open-source libraries. The updates fix issues that could enable traffic interception, kernel state disclosure, user fingerprinting, installed-app enumeration, Mail privacy bypasses, exposure of deleted Notes content, and crashes from out-of-bounds writes. Apple said it had no reports of in-the-wild exploitation for the vulnerabilities listed in the release notes, but urged users to update, with particular importance for older devices and managed macOS environments. Among the patched flaws is **`CVE-2024-27828`**, a high-severity memory-handling bug in **IOSurfaceRoot** that could let a local app trigger a kernel panic or execute arbitrary code with kernel privileges. STAR Labs said the issue stemmed from a reference count leak in `IOSurfaceRootUserClient::s_create_shared_event`, where repeated calls with crafted input could corrupt memory handling; the flaw affected iOS and iPadOS before 17.5, tvOS before 17.5, watchOS before 10.5, and visionOS before 1.2. Apple addressed the bug through improved memory handling, adding it to a broader pattern of fixes spanning both current and legacy Apple platforms.
Jul 1, 2026
Apple released a comprehensive set of security updates for its major operating systems and applications, including iOS 26.1, iPadOS 26.1, macOS Tahoe 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, tvOS 26.1, watchOS 26.1, visionOS 26.1, Safari 26.1, and Xcode 26.1. The updates address 110 vulnerabilities, several of which involve memory corruption issues in components such as ImageIO, FontParser, and WebKit, potentially allowing remote code execution. Other vulnerabilities could allow unauthorized access to sensitive user data through components like Spotlight, CoreMedia, MallocStackLogging, Admin Framework, sudo, Security, SoftwareUpdate, and AppleMobile. None of the vulnerabilities were reported as actively exploited at the time of release, and Apple provided limited technical details in its advisories. Security authorities, including the Canadian Centre for Cyber Security, have urged users and administrators to promptly apply these updates to mitigate potential risks. The updates are considered routine but critical, given the breadth of affected products and the potential impact of the vulnerabilities. Users are advised to review Apple's official security update documentation and ensure all devices are updated to the latest versions to maintain security and privacy protections.
Jun 29, 2026
Apple released security updates for **macOS Sequoia 15.7.5** and **macOS Sonoma 14.8.5**, patching a wide range of vulnerabilities across core operating system components, networking, printing, privacy controls, the kernel, and bundled open-source software. The advisories describe flaws that could lead to **privilege escalation**, **sandbox escape**, **unauthorized access to sensitive data**, **kernel memory disclosure**, **denial of service**, **arbitrary file write**, and modification of protected file system areas. Affected components include high-risk areas such as **Kernel**, **CoreServices**, **CUPS**, **CFNetwork**, **NetAuth**, **SMB**, **TCC**, **Security**, and **PackageKit**, with additional privacy-related fixes for apps and services including **Mail**, **Messages**, **Focus**, **Phone**, and **Spotlight**. Apple also shipped patches for third-party code in **Apache**, **curl**, and ImageIO-related libraries, and credited external researchers and organizations including **KU Leuven**, **Google**, **Trend Micro Zero Day Initiative**, **Nosebeard Labs**, **DBAppSecurity WeBin lab**, and Renault researchers for reporting the issues.
Jun 29, 2026