Apple fixes hundreds of security flaws: update your iPhone, iPad and Mac
Apple's 26 October updates close hundreds of security holes across iPhone, iPad and Mac, and owners of older iPhones get a fix for a flaw that was used in real attacks.
If your iPhone, iPad or Mac has been nagging you about an update this week, now is a good time to say yes. On 26 October Apple put out one of its biggest batches of security fixes this year, covering the current software as well as older versions that many people in Beckenham and across the UK are still running. Here is what came out, which devices it covers, and the few minutes of work we recommend.
What happened
Apple released iOS and iPadOS 27.2 along with macOS Golden Gate 27.2, and at the same time it updated older systems: iOS and iPadOS 26.7.2, macOS Tahoe 26.7.2 and macOS Sequoia 15.8.2. Apple TV, Apple Watch, Vision Pro and the Safari browser were updated too.
The numbers are large. SecurityWeek counted 163 vulnerabilities fixed in iOS 27.2 and 263 in macOS Golden Gate 27.2. The older Mac versions, Tahoe and Sequoia, each received around 200 fixes. Many of the flaws involve the parts of the system that open web pages, pictures, PDFs, fonts and video. In the worst cases, a booby-trapped file or website could let an attacker run their own code on your device.
On the Mac side, Apple fixed a long list of problems in Screen Sharing, Remote Management and file sharing. Apple's notes say some of these could be attacked by someone on the same network, and one Remote Management bug could let a remote attacker run code. Apple also fixed several ways an app could get past Gatekeeper, the Mac feature that checks downloaded software before it opens.
Apple doesn't say that any of the iOS 27.2 or macOS 27.2 fixes were being used in attacks. The exception is on older iPhones, covered below.
Who it affects
Almost every Apple user. iOS 27.2 is for the iPhone 11 and later. If you have stayed on iOS 26, there is iOS 26.7.2 for the same phones, so you can keep up with security fixes without moving to the newest version yet.
Owners of an iPhone XS, XS Max or XR, or a 7th-generation iPad. These devices can't run the newer systems, but Apple has released iOS 18.7.11 for them. It includes a fix for a flaw in how the phone handles certain files, and Apple says it is aware of a report that this flaw may have been exploited in an extremely sophisticated attack against specific targeted people. Apple fixed the same bug for newer iOS versions back in September. Attacks like this are usually aimed at a small number of people, but the fix costs you nothing, so install it.
Mac owners. Apple's security page lists updates for macOS Golden Gate, Tahoe and Sequoia. We couldn't find a matching update for macOS Sonoma or anything older in this round. If your Mac is on one of those, it isn't getting these fixes.
What to do now
- Back up first. On an iPhone or iPad, check that iCloud Backup is switched on and has run recently (Settings, tap your name, iCloud, iCloud Backup). On a Mac, plug in your Time Machine drive and let a backup finish.
- Update your iPhone or iPad. Go to Settings, General, Software Update. Plug the device in, connect to Wi-Fi and leave it to install. It may restart more than once.
- Update your Mac. Open System Settings, General, Software Update. If you see options for both a newer version and an update for your current one, either will give you these security fixes. Pick the one you're comfortable with.
- Turn on automatic updates. On the same Software Update screen, switch on automatic updates and the option to install security responses, so future fixes arrive without you needing to remember.
- Switch off sharing you don't use. Several of the Mac fixes are in Screen Sharing and Remote Management. If you never let anyone control your Mac remotely, turn these off under System Settings, General, Sharing. It's a good habit even after updating.
- Check the family's devices. Older iPads handed down to children and spare phones in drawers are often the ones still waiting to update.
If your Mac can't go past Sonoma or an older version, it's worth deciding what to do next. Sometimes a newer version can be installed, and sometimes the honest answer is that the machine is fine for light use but shouldn't be trusted with online banking any more. We're happy to look at it and give you a straight answer.
When to get help
Updates usually go smoothly, but not always. If an update keeps failing, your device says there isn't enough storage, your Mac won't start properly afterwards, or you just aren't sure which version you're on, Home Computer Repairs can help. We can often sort it out over a secure connection with our remote computer support service, or visit you at home within 10 miles of Beckenham through our home computer repair service to back up, update and check every device in the house. Call us on 020 8658 4366 for friendly, jargon-free advice.
Sources: Apple security releases, Apple: iOS 18.7.11 security content, Apple: iOS 27.2 security content, Apple: macOS Golden Gate 27.2 security content, SecurityWeek