Why the iOS 26.5 Security Update Is So Urgent
Apple’s new iOS 26.5 security update delivers more than 60 security fixes, making it a high‑priority install for every eligible iPhone. Among the most serious issues are six kernel‑level flaws, including CVE-2026-28951, which could let a malicious app gain root privileges and effectively take full control of your device. Around a dozen WebKit issues were also patched, such as CVE-2026-28962, where simply interacting with malicious web content could expose sensitive data. Another bug, CVE-2026-28995 in App Intents, might allow a rogue app to break out of its sandbox. Together, these kernel and WebKit vulnerabilities represent exactly the kind of components attackers chain together in real‑world mobile exploits. Even though none of the issues are currently reported as actively exploited, installing the iOS 26.5 security update as soon as possible is the safest way to protect your iPhone and your data.
Google and AI Researchers Helped Find Critical Vulnerabilities
Several of the most concerning flaws fixed in iOS 26.5 were uncovered by specialized security teams before attackers could weaponize them. One kernel security bug, tracked as CVE-2026-28943, was reported by Google’s Threat Analysis Group, a team known for investigating sophisticated, targeted attacks against high‑risk users. On the WebKit side, Apple credits Anthropic researchers working with its Claude AI system for discovering CVE-2026-28942. This highlights a growing trend: defenders are now using advanced AI tools to uncover complex vulnerabilities, even as attackers increasingly rely on AI to develop and automate exploits. The result is an accelerating security arms race around components like the kernel and WebKit, which sit at the heart of iPhone security. Because these vulnerabilities are exactly the type attackers look for, applying the critical vulnerability fix provided by iOS 26.5 is strongly recommended rather than waiting.
Updates for Older iPhones and iPads: iOS 18, 17, 16, and 15
Alongside iOS 26.5 for newer iPhones, Apple released matching iPhone security patches for older hardware that cannot run the latest version. Devices such as iPhone XS, iPhone XS Max, iPhone XR, and iPad 7th generation receive iOS 18.7.9 and iPadOS 18.7.9. iPad Pro 12.9‑inch 2nd generation, iPad Pro 10.5‑inch, and iPad 6th generation are covered by iPadOS 17.7.11. iPhone 8, iPhone 8 Plus, iPhone X, iPad 5th generation, iPad Pro 9.7‑inch, and the original 12.9‑inch iPad Pro get iOS/iPadOS 16.7.16. Even older models like iPhone 6s, iPhone 7, the first‑generation iPhone SE, iPad Air 2, iPad mini 4, and iPod touch 7th generation receive iOS/iPadOS 15.8.8. These releases carry the same underlying security fixes as iOS 26.5, including kernel and WebKit vulnerability patches, ensuring that long‑lived devices stay protected against modern threats.
How to Install the New iOS and iPadOS Security Updates Safely
Installing the iOS 26.5 security update—or its equivalents on older versions—only takes a few minutes and dramatically improves your protection. Before you begin, back up your iPhone or iPad to iCloud or your preferred backup method to safeguard your data. Then open the Settings app, tap General, and select Software Update. Your device will check for the latest version, whether that is iOS 26.5 on newer models or iOS/iPadOS 18.7.9, 17.7.11, 16.7.16, or 15.8.8 on older ones. Tap Download and Install and follow the prompts; your device will restart to complete the process. Because the kernel security bugs and WebKit vulnerability patches address components that are frequently targeted in mobile attacks, waiting to update leaves you unnecessarily exposed. Make time to install these iPhone security patches on every compatible device you use.