Apple Warns of Critical iOS Security Flaws

Apple has urged iPhone and iPad users to update their devices immediately after discovering two serious zero-day security vulnerabilities that could allow hackers to take control of affected devices.

The flaws were found in WebKit, the browser engine behind Safari and all iOS browsers. Apple said the vulnerabilities are linked to a highly sophisticated cyberattack exploiting malicious websites to execute harmful code without users’ knowledge.

Users with automatic updates enabled have already received the fix. Others are advised to manually install iOS 26.2 or iPadOS 26.2 as soon as possible. The risk is highest for iPhone 11 and newer models, as well as several recent iPad generations.

Apple confirmed the issues are zero-day vulnerabilities, meaning they were actively exploited before being discovered. Security updates have also been released for Macs, Apple Watch, Apple TV, Vision Pro and the Safari browser.

Cybersecurity experts say timely updates, cautious browsing and enabling automatic updates remain the most effective protection against advanced cyber threats.