Apple released a significant security update this week that every iPhone and iPad owner should install right away. The company pushed out iOS 26.2 and iPadOS 26.2 to patch more than two dozen security problems, some of which are serious enough to concern security experts.
The most alarming fixes involve the web browser software that powers Safari and most third-party apps on your device. According to PhoneScoop, Apple confirmed that sophisticated attackers may have already exploited two of these vulnerabilities against specific individuals. The company didn't identify who was targeted, but the nature of the attack suggests these weren't random attempts—professionals deliberately went after certain people using advanced techniques.
Beyond the browser vulnerabilities, the update addresses problems that could let apps access your payment information without permission, peek at your hidden photos without unlocking your phone, see which apps you've installed, or even access your Safari browsing history. One fix prevents hackers from spoofing your FaceTime caller ID, meaning someone could potentially impersonate a trusted contact during a call. Another vulnerability could have allowed password fields to remain visible during remote FaceTime sessions, exposing sensitive information.
The update also patched issues with Apple's core system software that could have given malicious apps administrator-level access to your device; essentially full control. Additional fixes addressed problems in video processing, file handling, and communication frameworks.
Apple typically releases security updates every few months, but critical patches like these warrant immediate action. The company made the update available to all iPhones and iPads going back several generations, starting with the iPhone 11 and iPad Pro from 2018.
To update your device, go to Settings, tap General, and select Software Update. If you have automatic updates enabled, your device may have already installed the patch. Given the severity of some of these vulnerabilities, security experts recommend updating as soon as possible; treating this like you would a critical fix for your car's brakes rather than a routine maintenance check.
Source: PhoneScoop
