Macworld Apple Releases Critical Security Updates for iOS 27 and macOS 27
Article Content
- •Apple patched over 260 vulnerabilities in iOS 27 and macOS 27.
- •Critical vulnerabilities include remote code execution and denial-of-service risks.
- •AI tools significantly contributed to identifying many of the vulnerabilities.
On September 14, 2026, Apple released iOS 27 and macOS 27, addressing over 260 vulnerabilities across its operating systems. iOS 27 alone includes 122 security fixes, with significant issues related to Bluetooth and mobile radio modem vulnerabilities that could allow remote code execution and denial-of-service attacks. Notably, many vulnerabilities were identified through AI-driven security research. The updates also include fixes for privacy issues and kernel vulnerabilities that could allow malicious apps to gain elevated privileges. Users are urged to update their devices to mitigate potential risks, as no active exploits have been reported for these vulnerabilities. The updates also extend to older operating systems, including iOS 26.7 and macOS 26.7, which contain shared fixes. Apple has not disclosed specific details about vulnerabilities it discovered internally. The urgency of these updates highlights the increasing reliance on AI in both vulnerability discovery and exploitation.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (51)
Following this threat?
Track Cisco and CVE-2022-3437 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
North Korean Hackers Steal $6.3 Billion from Binance in Record Crypto Heist On October 29, 2026, Binance, the world's largest cryptocurrency exchange, reported a massive security breach resulting in the theft of approximately $6.3 billion across ten blockchains. The attack is attributed to North Korea's TraderTraitor hacking group, which gained access via a compromised DevOps engineer's…
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…