Apple Ships iOS, iPadOS, and macOS Tahoe 26.5.2 Security Updates
Apple released iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2 with security fixes for supported iPhone, iPad, and Mac devices. The updates are available through the standard software update mechanisms, including over-the-air installation on mobile devices and System Settings > Software Update on Macs, and Apple described them as minor releases focused on security.
The Canadian Centre for Cyber Security said Apple’s advisories cover vulnerabilities affecting iOS and iPadOS versions prior to 26.5.2 and macOS Tahoe versions prior to 26.5.2. Neither Apple’s release notes nor the cited reports disclosed specific CVE identifiers or exploitation details, but the Cyber Centre urged users and administrators to review Apple’s security documentation and apply the updates promptly.
Get ahead of threats like this
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
How this story unfolded
5 events from the most recent confirmed update back to the earliest known activity.
Apple reportedly accelerates 26.5.2 releases over AI-driven hacking concerns
Reuters, as cited by MacRumors, reported that Apple released iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2 earlier than planned, pulling more than 25 security fixes forward from the 26.6 update cycle. Apple reportedly made the move out of concern that artificial intelligence could speed development of malicious hacking tools, while saying it had no evidence the patched flaws were actively exploited.
Apple releases Safari 26.5.2 with security fixes
Apple released Safari 26.5.2 for macOS 15 Sequoia and macOS 14 Sonoma as part of its 26.5.2 security updates. The update primarily addressed WebKit vulnerabilities, and the report said Apple did not indicate any of the flaws had been exploited in the wild.
Apple publishes security advisories for iOS, iPadOS, and macOS Tahoe
Apple published security advisories covering vulnerabilities affecting iOS and iPadOS versions prior to 26.5.2 and macOS Tahoe versions prior to 26.5.2. The Canadian Centre for Cyber Security urged users and administrators to review the advisories and apply the updates.
Apple releases macOS Tahoe 26.5.2 with security fixes
Apple released macOS Tahoe 26.5.2 as a small update to the macOS Tahoe operating system and said the release includes security fixes for Mac devices.
Apple releases iOS 26.5.2 and iPadOS 26.5.2 with security fixes
Apple released iOS 26.5.2 and iPadOS 26.5.2 as minor updates for its mobile operating systems, stating that they include security fixes for iPhone and iPad devices.
Related entities
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Sources
11 references tracked. Mallory keeps watching after this page renders.
Apple Security Update Fixes 30+ Flaws In IOS 26.5.2
thecyberexpress.com
Open sourceJune 2026 Apple Updates - SANS Internet Storm Center
isc.sans.edu
Open sourceApple Releases iOS 26.5.2 With 29 Security Fixes, Most Affecting WebKit - gHacks Tech News
ghacks.net
Open sourceApple rushed to squash 29 bugs because AI is supercharging hackers - update ASAP | ZDNET
zdnet.com
Open sourceApple Releases iOS 26.5.2 With Security Fixes - MacRumors
macrumors.com
Open sourceiOS 26.5.2 Patches More Than 25 Security Vulnerabilities - MacRumors
macrumors.com
Open source26.5.2 Updates Squash Vulnerabilities in macOS, iOS, iPadOS, and Safari - TidBITS
tidbits.com
Open sourceApple Releases macOS Tahoe 26.5.2 - MacRumors
macrumors.com
Open sourceSee the full picture, correlated to your attack surface.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Related stories
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Apple Releases Security Updates Addressing Over 100 Vulnerabilities Across Multiple Platforms
Apple released a comprehensive set of security updates for its major operating systems and applications, including iOS 26.1, iPadOS 26.1, macOS Tahoe 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, tvOS 26.1, watchOS 26.1, visionOS 26.1, Safari 26.1, and Xcode 26.1. The updates address 110 vulnerabilities, several of which involve memory corruption issues in components such as ImageIO, FontParser, and WebKit, potentially allowing remote code execution. Other vulnerabilities could allow unauthorized access to sensitive user data through components like Spotlight, CoreMedia, MallocStackLogging, Admin Framework, sudo, Security, SoftwareUpdate, and AppleMobile. None of the vulnerabilities were reported as actively exploited at the time of release, and Apple provided limited technical details in its advisories. Security authorities, including the Canadian Centre for Cyber Security, have urged users and administrators to promptly apply these updates to mitigate potential risks. The updates are considered routine but critical, given the breadth of affected products and the potential impact of the vulnerabilities. Users are advised to review Apple's official security update documentation and ensure all devices are updated to the latest versions to maintain security and privacy protections.
Jun 29, 2026
Apple Releases iOS 26.1 and iPadOS 26.1 Security Updates Addressing Critical Vulnerabilities
Apple released iOS 26.1 and iPadOS 26.1, delivering critical security updates for a wide range of supported iPhone and iPad models. The updates address multiple vulnerabilities, including flaws in the Neural Engine that could allow malicious apps to crash system components or corrupt kernel memory, and weaknesses in Apple Account privacy controls that previously allowed unauthorized screenshot capture of sensitive data. Additional fixes strengthen sandbox enforcement and file integrity controls, reducing the risk of unauthorized data access or privilege escalation by malicious applications. Apple maintains its policy of withholding vulnerability details until patches are available, emphasizing the importance of timely updates for all eligible users. The company is also preparing for future releases, with iOS 26.2 expected to introduce new features such as digital passport support and RCS encryption, further enhancing both security and privacy for its user base.
Jul 1, 2026
Apple Fixes Broad Set of iOS, macOS, and visionOS Vulnerabilities
Apple released a wide-ranging set of security updates across **iOS**, **iPadOS**, **macOS Tahoe**, **watchOS**, **tvOS**, **visionOS**, **Safari**, and **Xcode**, addressing more than 85 vulnerabilities across core components including the kernel, WebKit, AirPlay, Keychain, and open-source libraries. The updates fix issues that could enable traffic interception, kernel state disclosure, user fingerprinting, installed-app enumeration, Mail privacy bypasses, exposure of deleted Notes content, and crashes from out-of-bounds writes. Apple said it had no reports of in-the-wild exploitation for the vulnerabilities listed in the release notes, but urged users to update, with particular importance for older devices and managed macOS environments. Among the patched flaws is **`CVE-2024-27828`**, a high-severity memory-handling bug in **IOSurfaceRoot** that could let a local app trigger a kernel panic or execute arbitrary code with kernel privileges. STAR Labs said the issue stemmed from a reference count leak in `IOSurfaceRootUserClient::s_create_shared_event`, where repeated calls with crafted input could corrupt memory handling; the flaw affected iOS and iPadOS before 17.5, tvOS before 17.5, watchOS before 10.5, and visionOS before 1.2. Apple addressed the bug through improved memory handling, adding it to a broader pattern of fixes spanning both current and legacy Apple platforms.
Jun 30, 2026