Apple's iOS 26.6.1 patches 29 security flaws, urges users to update
Apple released iOS 26.6.1 on Monday, fixing 29 vulnerabilities including WebKit and kernel issues. No exploits have been reported, but users are advised to update immediately.
The vulnerabilities include one that could allow an app to leak sensitive information via audio, and three affecting the operating system kernel that could let a remote attacker or malicious app terminate the system or corrupt memory. Most of the flaws impact WebKit, the browser engine used by Safari and other browsers, where malicious web content could crash the browser or corrupt memory.
Apple credited the discovery of nine of these flaws to OpenAI's Codex Security, an AI tool that helps companies identify and resolve security vulnerabilities. The company has increasingly turned to AI models to track down bugs, leading to more frequent security updates.
With iOS 27 expected to launch next month, this update is likely the final one for iOS 26, though another could still appear. The previous iOS 26.6 update, released in late July, addressed 91 vulnerabilities, while iOS 25.2 in late June fixed 29.
To install the update, iPhone and iPad users can go to Settings, select General, tap Software Update, and let the latest update download. Mac users can follow similar steps in System Settings.