Loading story…
Apple released iOS 26.4 and iPadOS 26.4, making Stolen Device Protection enabled by default and shipping 34 security fixes across components including Audio, iCloud, Mail, Printing, Siri, and the iOS kernel. The update now requires biometric authentication to view saved passwords and disable Lost Mode on an iPhone, strengthening protections against device theft and account takeover. Apple also issued corresponding 26.4 updates for watchOS, macOS, tvOS, and visionOS.
Alongside the security changes, Apple added several user-facing features across its platforms, including AI-generated Playlist Playground playlists in Apple Music, an Ambient Music widget, offline song recognition in Control Center, native HLS video episode support in Podcasts, average bedtime tracking in Health, and support for third-party AI chatbots in CarPlay once providers update their apps. The release also fixes a long-running keyboard accuracy bug, while the widely rumored upgraded Siri was not included in this version.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
3 events from the most recent confirmed update back to the earliest known activity.
Apple released iOS 26.4.1 for iPhone 11 and newer as a minor update. Later reporting said it fixes an iOS 26.4 bug affecting iCloud syncing in some apps and automatically enables Stolen Device Protection on certain enterprise-managed devices updating from iOS 26.4.
Alongside iOS 26.4 and iPadOS 26.4, Apple also released version 26.4 updates for watchOS, macOS, tvOS, and visionOS. These broader platform updates were reported as part of the same release cycle.
Apple released iOS 26.4 and iPadOS 26.4, introducing consumer feature updates and enabling Stolen Device Protection by default, which requires biometric authentication for sensitive actions such as viewing passwords and disabling Lost Mode. The release also fixed a keyboard typing bug and included 34 security fixes affecting components including Audio, iCloud, Mail, Printing, Siri, and the iOS kernel.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
6 references tracked. Mallory keeps watching after this page renders.
zdnet.com
Open sourcemacrumors.com
Open sourcecnet.com
Open sourcezdnet.fr
Open sourcezdnet.com
Open sourcegsmarena.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Apple released iOS 26.1 and iPadOS 26.1, delivering critical security updates for a wide range of supported iPhone and iPad models. The updates address multiple vulnerabilities, including flaws in the Neural Engine that could allow malicious apps to crash system components or corrupt kernel memory, and weaknesses in Apple Account privacy controls that previously allowed unauthorized screenshot capture of sensitive data. Additional fixes strengthen sandbox enforcement and file integrity controls, reducing the risk of unauthorized data access or privilege escalation by malicious applications. Apple maintains its policy of withholding vulnerability details until patches are available, emphasizing the importance of timely updates for all eligible users. The company is also preparing for future releases, with iOS 26.2 expected to introduce new features such as digital passport support and RCS encryption, further enhancing both security and privacy for its user base.
Jul 4, 2026
Apple released security updates for **iOS 18.7.7**, **iPadOS 18.7.7**, and **watchOS 26.4** to address a wide range of vulnerabilities affecting supported iPhones, iPads, and Apple Watch Series 6 and later. The patches cover core components including **Kernel**, **WebKit**, **Security**, **CoreMedia**, **CoreUtils**, **Audio**, **802.1X**, and **UIFoundation**, with Apple warning that successful exploitation could enable network traffic interception, denial of service, unauthorized access to sensitive data, installed-app enumeration, Keychain access, kernel memory disclosure, and in some cases kernel memory write or Activation Lock bypass.
Jun 29, 2026
Apple published security advisories detailing vulnerability fixes across multiple iOS and iPadOS versions, including iOS/iPadOS **16.7**, **17.2**, **18.1**, **18.3**, **26.1**, and **26.2**. The advisories describe a range of impacts such as sandbox escapes (including Web Content sandbox breakout), privacy issues where apps could access or expose sensitive user data via insufficient log redaction, file-system modification via temporary-file handling, and memory-safety flaws (e.g., out-of-bounds reads, type confusion, and bounds-checking issues) that could lead to crashes or memory corruption. Apple attributes fixes to changes like improved protocol handling, cache handling, input validation, and additional permission restrictions, and references issues by **CVE** where available. Several advisories also highlight device-state and authentication/logic weaknesses: iOS/iPadOS 18.3 includes a case where an attacker with physical access to an **unlocked** device could access Photos while the app is locked (`CVE-2025-24141`), while iOS/iPadOS 18.1 includes a lock-screen exposure issue (`CVE-2024-44274`) and a Shortcuts-related path-handling flaw that could allow arbitrary shortcut execution without user consent (`CVE-2024-44255`). The iOS/iPadOS 26.x advisories include privacy and permission issues (e.g., identifying installed apps, screenshots of sensitive embedded views), potential kernel memory corruption/system termination conditions, and logic/UI issues affecting security posture (e.g., passcode requirement timing after Face ID enrollment restore scenarios and potential FaceTime caller ID spoofing), with multiple findings credited to external researchers and teams (including Google Project Zero, ByteDance IES Red Team, and others).
Jun 29, 2026