Back Feeds2.Feedburner

Apple starts issuing lightweight security updates between software releases

Feeds2.Feedburner •Sinisa Markovic • March 18, 2026

Apple is delivering small security updates, called Background Security Improvements, starting with iOS 26.1, iPadOS 26.1, and macOS 26.1. Apple describes Background Security Improvements as lightweight security releases for components such as Safari, the WebKit framework, and other system libraries, delivered through ongoing patches between software updates. “In rare instances of compatibility issues, Background Security Improvements may be temporarily removed and then enhanced in a subsequent software update,” the company noted. Users can manage Background … More →

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Apple Releases Background Security Improvement for WebKit Flaw CVE-2026-20643 On March 17, 2026, Apple released its first Background Security Improvement to address a critical WebKit vulnerability tracked as CVE-2026-20643. This flaw could allow malicious web content to bypass the Same Origin Policy, potentially exposing user data across different sites. The update applies to devices running iOS 26.3.1, iPadOS 26.3.1, macOS 26.3.1, and macOS 26.3.2. Apple has not disclosed whether the vulnerability has been exploited in the wild. The Background Security Improvement system enables Apple to deliver quick, lightweight patches without requiring a full OS update. Users can manage these updates through the Privacy & Security settings on their devices. The update is significant as it marks a shift in Apple's approach to security, allowing for faster responses to vulnerabilities. The vulnerability was discovered by security researcher Thomas Espach. 22 sources 58

Extracted Entities

Platforms (5)

IOS IPadOS MacOS Safari WebKit