Loading story…
Apple released security updates for iOS 26.6.1, iPadOS 26.6.1, macOS 26.6.2, visionOS 26.6.1, and legacy iOS/iPadOS 18.7.10, addressing a broad set of vulnerabilities across supported platforms. Reporting on Apple’s advisories indicates the updates collectively fix more than 100 flaws, with roughly 29 to 30 issues documented for the current-generation iOS, iPadOS, and macOS releases and a much larger set rolled into the backported updates for older devices. Apple said it is not aware of any of the vulnerabilities being actively exploited, but urged users to update because public disclosure raises the risk of attacks against unpatched systems.
The patched issues span WebKit, the kernel, ImageIO, CoreAudio, APFS, Telephony, Wi‑Fi, Contacts, and other components, with impacts including arbitrary code execution, information disclosure, denial of service, memory corruption, sandbox escape, and cross-origin data exfiltration. One notable iOS flaw in Telephony could allow an attacker in a privileged network position to bypass IPsec authentication and intercept traffic, while Apple’s documentation also lists numerous WebKit bugs and an image-based code execution issue. Several findings were credited to AI-assisted security research, including nine CVEs attributed to OpenAI Codex Security, and Apple said some visionOS vulnerability details would be published separately.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
5 events from the most recent confirmed update back to the earliest known activity.
When releasing visionOS 26.6.1 on August 17, Apple did not provide the vulnerability details and indicated that the information would be published later. Reports described the release notes as effectively saying 'Details coming soon.'
In its disclosures for the August 17 updates, Apple said none of the vulnerabilities fixed in the released iOS, iPadOS, and macOS versions were known to have been actively exploited. Multiple reports noted Apple urged users to update promptly despite the lack of known in-the-wild exploitation.
Apple's security documentation for the August 17 releases listed extensive vulnerability fixes, with sources reporting 29 CVEs for the main iOS 26.6.1/iPadOS 26.6.1/macOS 26.6.2 set and 108 vulnerabilities across the released iOS, iPadOS, and macOS updates overall. The disclosures included numerous WebKit, kernel, ImageIO, CoreAudio, APFS, Wi‑Fi, and Telephony issues, including an iOS Telephony flaw that could bypass IPSec authentication and enable traffic interception.
On 2026-08-17, Apple released iOS 26.6.1, iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 26.6.1, and older-device updates iOS 18.7.10 and iPadOS 18.7.10. Apple said the updates contain security fixes.
A smaller macOS 26.6.1 update was released about two weeks before the August 17 releases to address a single Screen Sharing vulnerability. The flaw reportedly did not affect iOS or iPadOS.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
7 references tracked. Mallory keeps watching after this page renders.
seclists.org
Open sourcemalware.news
Open sourceisc.sans.edu
Open sourcetidbits.com
Open sourcemacrumors.com
Open sourcemacrumors.com
Open sourcesupport.apple.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Apple released `26.6` updates for **iOS, iPadOS, macOS Tahoe, watchOS, tvOS, and visionOS**, alongside **macOS Sequoia 15.7.8** and **macOS Sonoma 14.8.8** for older Macs. The company said the releases include security fixes, bug fixes, and Spotlight index optimizations intended to prepare devices for the next major OS generation, including **iOS 27**, **iPadOS 27**, **macOS 27**, and **visionOS 27**. Apple recommended installation through standard software update channels, including System Settings on Macs, Settings on Vision Pro, and the Apple Watch app or on-device settings for watches. Reporting on Apple’s security notes indicates the updates patch a large volume of flaws: nearly **90 vulnerabilities** in iOS and iPadOS, more than **130** and in some reports more than **150** fixes in macOS Tahoe, and more than **80** fixes across tvOS, watchOS, and visionOS. The addressed issues span the **kernel, WebKit, Wi‑Fi, Siri, image processing, the App Store, and the Neural Engine**. Apple did not say any of the vulnerabilities were actively exploited, but the breadth of the fixes means unpatched devices face increased risk now that the issues are public.
Aug 6, 2026
Apple released a wide-ranging set of security updates across **iOS**, **iPadOS**, **macOS Tahoe**, **watchOS**, **tvOS**, **visionOS**, **Safari**, and **Xcode**, addressing more than 85 vulnerabilities across core components including the kernel, WebKit, AirPlay, Keychain, and open-source libraries. The updates fix issues that could enable traffic interception, kernel state disclosure, user fingerprinting, installed-app enumeration, Mail privacy bypasses, exposure of deleted Notes content, and crashes from out-of-bounds writes. Apple said it had no reports of in-the-wild exploitation for the vulnerabilities listed in the release notes, but urged users to update, with particular importance for older devices and managed macOS environments. Among the patched flaws is **`CVE-2024-27828`**, a high-severity memory-handling bug in **IOSurfaceRoot** that could let a local app trigger a kernel panic or execute arbitrary code with kernel privileges. STAR Labs said the issue stemmed from a reference count leak in `IOSurfaceRootUserClient::s_create_shared_event`, where repeated calls with crafted input could corrupt memory handling; the flaw affected iOS and iPadOS before 17.5, tvOS before 17.5, watchOS before 10.5, and visionOS before 1.2. Apple addressed the bug through improved memory handling, adding it to a broader pattern of fixes spanning both current and legacy Apple platforms.
Jul 1, 2026
Apple released a comprehensive set of security updates for its major operating systems and applications, including iOS 26.1, iPadOS 26.1, macOS Tahoe 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, tvOS 26.1, watchOS 26.1, visionOS 26.1, Safari 26.1, and Xcode 26.1. The updates address 110 vulnerabilities, several of which involve memory corruption issues in components such as ImageIO, FontParser, and WebKit, potentially allowing remote code execution. Other vulnerabilities could allow unauthorized access to sensitive user data through components like Spotlight, CoreMedia, MallocStackLogging, Admin Framework, sudo, Security, SoftwareUpdate, and AppleMobile. None of the vulnerabilities were reported as actively exploited at the time of release, and Apple provided limited technical details in its advisories. Security authorities, including the Canadian Centre for Cyber Security, have urged users and administrators to promptly apply these updates to mitigate potential risks. The updates are considered routine but critical, given the breadth of affected products and the potential impact of the vulnerabilities. Users are advised to review Apple's official security update documentation and ensure all devices are updated to the latest versions to maintain security and privacy protections.
Jun 29, 2026