Apple has released its largest security update cycle to date, addressing over 260 vulnerabilities across its operating systems, browsers, and software products. The company confirmed that none of these flaws were actively exploited by cybercriminals prior to the patches.
In iOS 27 and iPadOS 27, the company fixed 122 vulnerabilities. Two of these were identified with the help of artificial intelligence, including a flaw in AVE video decoders that caused system crashes and a data type error in the Foundation framework that could lead to a denial-of-service attack.
The update for macOS 27 includes fixes for 204 vulnerabilities. Of these, 10 were detected using AI, with contributions from organizations such as Calif, Anthropic Research, and the Nvidia AI Red Team. The vulnerabilities ranged from unauthorized privilege escalation to unauthorized access to sensitive user data.
Critical issues addressed in the update include a privilege escalation flaw that allowed applications to gain root access. Another significant vulnerability was found in the Background Assets component, which previously allowed applications to access private user information during the file download process.
