Apple has issued an urgent warning to all iPhone users to update immediately to iOS 26.2. This emergency patch addresses a total of 26 flaws in the iOS software, including two critical vulnerabilities that are already being actively exploited in real-life, sophisticated attacks.
Table of Contents
-
I. Why The Immediate Update Is Critical
-
II. Details on Zero-Day Exploits and Key Flaws
-
III. Context: Spyware and The Patching Strategy
-
IV. Expert Opinion: The Danger of Delay
-
V. How to Update Now
I. Why The Immediate Update Is Critical
The main reason for the urgency is the presence of two “zero-day” flaws—vulnerabilities that attackers are already using before a widespread patch is available.
-
Apple’s update is designed to give users time to patch their devices before criminals can fully weaponize the details of the fixed flaws.
-
The flaws were reportedly exploited in an “extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26”.
II. Details on Zero-Day Exploits and Key Flaws
iOS 26.2 addresses three major areas of risk: two flaws in WebKit and one in the Kernel.
WebKit Flaws (Already Exploited)
The two already-exploited issues are related and tracked as CVE-2025-43529 and CVE-2025-14174.
-
WebKit is the engine that powers the Safari browser.
-
The first flaw (CVE-2025-43529) could lead to arbitrary code execution if a user interacts with maliciously crafted web content.
-
WebKit remains a prime target because it “sits at the intersection of web content and the operating system”. When exploited, these flaws can “bypass controls and enable deep surveillance even on encrypted apps”.
Kernel Flaw (Root Access Risk)
A separate vulnerability in the iPhone Kernel, tracked as CVE-2025-46285, was also fixed.
-
This flaw could allow an app to gain root privileges.
-
If an attacker gains root access, they “effectively own” the phone, allowing them to bypass app sandboxes, read messages and login codes, and hijack banking sessions.
-
The Kernel is serious because it “sits at the very core of the operating system”.
III. Context: Spyware and The Patching Strategy
Spyware Targeting
The release of iOS 26.2 coincides with Apple confirming its devices are being heavily targeted by spyware.
-
Apple has sent cyber threat notifications to users in at least 80 countries.
-
Spyware is often highly targeted, aimed at specific subsets of users like journalists, dissidents, or individuals in certain business sectors.
-
If installed, spyware can “see and hear everything you do, even via encrypted apps such as WhatsApp”.
Why iOS 26.2, Not iOS 26.1.1?
The emergency patch was named iOS 26.2 instead of a smaller security update (like iOS 26.1.1) because Apple had already enabled “Background Security Improvements” in iOS 26.1.
-
If a user had previously updated to iOS 26.1 and enabled this feature, their iPhone would have already been protected from this possible spyware attack.
-
Therefore, moving straight to iOS 26.2 is crucial for anyone who failed to update from iOS 26 to iOS 26.1.
IV. Expert Opinion: The Danger of Delay
Cybersecurity experts emphasize that timing is critical once a patch is released.
“Once Apple issues a fix, details about the vulnerabilities quickly become public, giving attackers a roadmap to exploit any devices that have not yet been patched. The longer users wait, the greater the risk.” — Darren Guccione, CEO and co-founder of Keeper Security
-
Attackers often chain together multiple flaws to bypass device security layers, making it essential to patch all known weaknesses simultaneously.
-
Criminals weaponize newly patched flaws quickly.
V. How to Update Now
Apple has issued the fix for both the current and an older operating system.
-
Current Version: Update to iOS 26.2.
-
Older Version: Update to iOS 18.7.3.
-
Important: Users should update from their phone’s settings, not via links or popups.
To update your iPhone, go to Settings > General > Software Update.
Bonus Features in iOS 26.2: The update also includes new features such as improvements to Enhanced Safety Alerts, new Liquid Glass options, Podcast enhancements, offline lyric support in Apple Music, sleep score revisions, alarms for reminders, and AirPods Live Translation in the EU.
