Loading story…
Apple issued annual security updates across its operating systems, patching 261 vulnerabilities—its largest annual remediation total reported to date. The fixes span the Kernel, WebKit, SMB, CUPS, ImageIO, SceneKit, Disk Images, and privacy and sandboxing services. Documented impacts include arbitrary code execution, root or kernel privilege escalation, memory disclosure and corruption, sandbox escapes, Gatekeeper and privacy-control bypasses, data exposure, and denial of service through malicious web content and files, network shares and servers, accessories, or local applications.
iOS 27 fixes more than 100 vulnerabilities, while the security-only iOS 26.7 update fixes more than 80, including 75 issues shared with iOS 27; this gives organizations deferring the iOS 27 upgrade a path to remediate many of the same risks. Notable issues include a kernel flaw through which a malicious application could obtain root privileges and a Bluetooth flaw that could permit remote code execution. Apple also released macOS Tahoe 26.7 and macOS Sequoia 15.8 for systems remaining on older macOS versions. No vulnerabilities are known to be actively exploited, but published technical details heighten exposure for unpatched devices; Apple credited Anthropic Claude for three fixes and recognized OpenAI Codex Security.
See real exploitation activity before you spend the cycle.
4 events from the most recent confirmed update back to the earliest known activity.
Apple published security details for iOS 27 and iOS 26.7, including kernel flaws that could enable root access and a Bluetooth flaw that could enable remote code execution. Apple said none of the addressed issues were known to be actively exploited and credited three fixes to Anthropic Claude, with additional recognition for OpenAI Codex Security.
Apple released macOS Tahoe 26.7 and macOS Sequoia 15.8 with security fixes for older Macs and users not upgrading to macOS Golden Gate.
Apple released iOS 27 with fixes for more than 100 vulnerabilities and iOS 26.7, a security-only update, with more than 80 fixes. The releases share 75 fixes, providing an update path for users remaining on iOS 26.
Apple released annual updates across its operating systems, introducing new features and patching 261 vulnerabilities, described as the company's largest vulnerability total in a single annual update.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
6 references tracked. Mallory keeps watching after this page renders.
tidbits.com
Open sourcemalware.news
Open sourcemacrumors.com
Open sourceisc.sans.edu
Open sourcemacrumors.com
Open sourcemacrumors.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Apple released security updates for **iOS 26.6.1**, **iPadOS 26.6.1**, **macOS 26.6.2**, **visionOS 26.6.1**, and legacy **iOS/iPadOS 18.7.10**, addressing a broad set of vulnerabilities across supported platforms. Reporting on Apple’s advisories indicates the updates collectively fix more than 100 flaws, with roughly 29 to 30 issues documented for the current-generation iOS, iPadOS, and macOS releases and a much larger set rolled into the backported updates for older devices. Apple said it is not aware of any of the vulnerabilities being actively exploited, but urged users to update because public disclosure raises the risk of attacks against unpatched systems. The patched issues span **WebKit**, the kernel, **ImageIO**, **CoreAudio**, **APFS**, **Telephony**, Wi‑Fi, Contacts, and other components, with impacts including arbitrary code execution, information disclosure, denial of service, memory corruption, sandbox escape, and cross-origin data exfiltration. One notable iOS flaw in `Telephony` could allow an attacker in a privileged network position to bypass **IPsec** authentication and intercept traffic, while Apple’s documentation also lists numerous WebKit bugs and an image-based code execution issue. Several findings were credited to AI-assisted security research, including nine CVEs attributed to **OpenAI Codex Security**, and Apple said some visionOS vulnerability details would be published separately.
Aug 31, 2026
Apple released broad security updates for its platforms, including **iOS**, **iPadOS**, **macOS Sequoia 15.4**, **Safari**, **tvOS**, and **visionOS**, fixing a total of 213 vulnerabilities. The updates addressed 77 flaws in iOS and iPadOS, 123 in macOS Sequoia, and 13 in Safari, with impact ranging from **sandbox escape** and **privilege escalation to root** to **arbitrary file deletion**, **kernel-level code execution**, and **WebKit memory corruption**. Apple also issued fixes for older supported operating systems, backporting patches for vulnerabilities that had been disclosed and reportedly exploited in recent months, including **`CVE-2025-24200`**, **`CVE-2025-24201`**, and **`CVE-2025-24085`**. The company recommended upgrading devices to at least **iOS 15.8.4, 16.7.11, and 18.4**; **iPadOS 15.8.4, 16.7.11, 17.7.6, and 18.4**; and **macOS Ventura 13.7.5, Sonoma 14.7.5, and Sequoia 15.4** to reduce exposure.
Jul 24, 2026
Apple released a comprehensive set of security updates for its major operating systems and applications, including iOS 26.1, iPadOS 26.1, macOS Tahoe 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, tvOS 26.1, watchOS 26.1, visionOS 26.1, Safari 26.1, and Xcode 26.1. The updates address 110 vulnerabilities, several of which involve memory corruption issues in components such as ImageIO, FontParser, and WebKit, potentially allowing remote code execution. Other vulnerabilities could allow unauthorized access to sensitive user data through components like Spotlight, CoreMedia, MallocStackLogging, Admin Framework, sudo, Security, SoftwareUpdate, and AppleMobile. None of the vulnerabilities were reported as actively exploited at the time of release, and Apple provided limited technical details in its advisories. Security authorities, including the Canadian Centre for Cyber Security, have urged users and administrators to promptly apply these updates to mitigate potential risks. The updates are considered routine but critical, given the breadth of affected products and the potential impact of the vulnerabilities. Users are advised to review Apple's official security update documentation and ensure all devices are updated to the latest versions to maintain security and privacy protections.
Jun 29, 2026