Loading story…
Apple released security updates for iOS, iPadOS, macOS, and visionOS to address a critical vulnerability in the FontParser framework. The iOS 26.0.1 update, which also applies to iPadOS, was made available to users to fix several feature flaws and one significant security bug. The security flaw patched in this release involved Apple's FontParser, a component responsible for handling font files, which could potentially be exploited by maliciously crafted font files to execute arbitrary code or compromise device security. In addition to iOS and iPadOS, Apple issued updates for macOS Tahoe, macOS Sequoia, macOS Sonoma, and visionOS, ensuring that all major Apple platforms were protected against this vulnerability. The updates were strongly recommended for all users, regardless of whether they had experienced any issues, due to the security implications of the FontParser bug. Alongside the security fix, the iOS 26.0.1 update resolved a Wi-Fi connectivity issue affecting iPhone 17 units, which caused intermittent disconnections and problems with CarPlay integration. Users also reported that the update fixed a bug preventing some devices from connecting to cellular networks after the previous iOS 26 update. Another issue addressed was the appearance of unwanted artifacts in photos taken under certain lighting conditions on iPhone 17 devices, which was resolved with the new update. The update also corrected a problem where custom Home screen tints caused some app icons to appear blank. Additionally, the VoiceOver accessibility feature, which had stopped working for some users after updating to iOS 26, was restored to full functionality. The security advisory from the Canadian Centre for Cyber Security highlighted the importance of applying these updates promptly to mitigate the risk posed by the FontParser vulnerability. Apple’s coordinated release of updates across its ecosystem demonstrates the company’s commitment to addressing both security and usability issues in a timely manner. The advisories emphasized that users and administrators should review the official Apple security update documentation and ensure all affected devices are updated to the latest versions. The FontParser vulnerability, if left unpatched, could have allowed attackers to compromise devices through malicious font files, underscoring the critical nature of this update. Apple’s rapid response and the broad scope of the updates reflect the ongoing need for vigilance in maintaining device security across all platforms.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
ZDNET reported that Apple released iOS 26.0.1, describing it as fixing a range of glitches and urging iPhone users to update. This appears to be a follow-on software update release reported the day after the earlier Apple security advisory.
The Canadian Centre for Cyber Security published Apple security advisory AV25-629, indicating Apple had released security updates affecting its products. The advisory reflects the underlying vendor security release documented on that date.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Apple has released urgent security updates to address a critical vulnerability in its FontParser component, identified as CVE-2025-43400. This flaw affects a wide range of Apple operating systems, including iOS, iPadOS, macOS, visionOS, watchOS, and tvOS. The vulnerability is an out-of-bounds write issue in the system font parser, which could allow a maliciously crafted font file to cause unexpected application crashes or corrupt process memory. Security experts warn that, while there is no evidence of active exploitation, similar vulnerabilities have previously been leveraged for jailbreaks and spyware attacks. The flaw was discovered internally by Apple, and the company has not reported any incidents of it being exploited in the wild. Updates have been released for iOS 26.0.1 and 18.7.1, iPadOS 26.0.1 and 18.7.1, macOS Tahoe 26.0.1, Sequoia 15.7.1, and Sonoma 14.8.1, as well as visionOS 26.0.1, watchOS 26.0.2, and tvOS 26.0.1. The updates cover a broad range of devices, including iPhone 11 and later, various iPad Pro, Air, and mini models, and recent Mac computers. The vulnerability stems from insufficient bounds checking in the font processing code, which could potentially be chained with other vulnerabilities to achieve remote code execution. Apple recommends that all users update their devices promptly to mitigate the risk. The update process is straightforward, with instructions provided for iOS, iPadOS, macOS, and Apple Watch users. For macOS, users should utilize the Software Update feature in System Settings or System Preferences, depending on their version. For iOS and iPadOS, updates can be accessed via the Settings app under General > Software Update. Apple Watch users are advised to update through the Watch app on their paired iPhone. Although the watchOS and tvOS updates do not address security issues beyond this vulnerability, users are still encouraged to keep their devices current. The rapid release of these patches following major OS updates highlights Apple's commitment to addressing security issues promptly. Organizations and individual users are urged to deploy these updates as soon as possible to protect against potential exploitation. The vulnerability's technical details emphasize the importance of robust input validation in system components that handle untrusted data, such as font files. Security professionals note that, even in the absence of active attacks, the risk posed by such vulnerabilities warrants immediate action. Apple's internal discovery and swift remediation of CVE-2025-43400 demonstrate proactive security practices in the face of evolving threats.
Jun 29, 2026
Apple released a comprehensive set of security updates for its major operating systems and applications, including iOS 26.1, iPadOS 26.1, macOS Tahoe 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, tvOS 26.1, watchOS 26.1, visionOS 26.1, Safari 26.1, and Xcode 26.1. The updates address 110 vulnerabilities, several of which involve memory corruption issues in components such as ImageIO, FontParser, and WebKit, potentially allowing remote code execution. Other vulnerabilities could allow unauthorized access to sensitive user data through components like Spotlight, CoreMedia, MallocStackLogging, Admin Framework, sudo, Security, SoftwareUpdate, and AppleMobile. None of the vulnerabilities were reported as actively exploited at the time of release, and Apple provided limited technical details in its advisories. Security authorities, including the Canadian Centre for Cyber Security, have urged users and administrators to promptly apply these updates to mitigate potential risks. The updates are considered routine but critical, given the breadth of affected products and the potential impact of the vulnerabilities. Users are advised to review Apple's official security update documentation and ensure all devices are updated to the latest versions to maintain security and privacy protections.
Jun 29, 2026
Apple released security updates for **iOS 26.6.1**, **iPadOS 26.6.1**, **macOS 26.6.2**, **visionOS 26.6.1**, and legacy **iOS/iPadOS 18.7.10**, addressing a broad set of vulnerabilities across supported platforms. Reporting on Apple’s advisories indicates the updates collectively fix more than 100 flaws, with roughly 29 to 30 issues documented for the current-generation iOS, iPadOS, and macOS releases and a much larger set rolled into the backported updates for older devices. Apple said it is not aware of any of the vulnerabilities being actively exploited, but urged users to update because public disclosure raises the risk of attacks against unpatched systems. The patched issues span **WebKit**, the kernel, **ImageIO**, **CoreAudio**, **APFS**, **Telephony**, Wi‑Fi, Contacts, and other components, with impacts including arbitrary code execution, information disclosure, denial of service, memory corruption, sandbox escape, and cross-origin data exfiltration. One notable iOS flaw in `Telephony` could allow an attacker in a privileged network position to bypass **IPsec** authentication and intercept traffic, while Apple’s documentation also lists numerous WebKit bugs and an image-based code execution issue. Several findings were credited to AI-assisted security research, including nine CVEs attributed to **OpenAI Codex Security**, and Apple said some visionOS vulnerability details would be published separately.
Aug 31, 2026