Apple released urgent software updates on Monday for iPhone, iPad, and Mac, addressing 29 security vulnerabilities. The patches, which arrived several weeks earlier than anticipated, come in response to the growing threat of AI-powered cyberattacks. The company acknowledged that artificial intelligence is enabling malicious actors to develop exploits at an unprecedented pace, forcing a change in its typical update schedule.

The updates are available as version 26.5.2 for iOS, iPadOS, and macOS. Users can install them by navigating to Settings (or System Settings on a Mac), selecting General, and then tapping Software Update. The company recommends installing the update as soon as possible to mitigate potential risks.

What the patches fix

The 29 vulnerabilities cover a range of issues, including bugs in the operating system kernel and, most critically, multiple flaws in WebKit — the browser engine that powers Safari and also renders web content within many third-party apps. WebKit vulnerabilities are particularly dangerous because they can be triggered simply by loading a malicious webpage or clicking a deceptive link, even inside apps that are not browsers.

Adam Boynton, senior enterprise strategy manager at security firm Jamf, explained the severity: “WebKit isn’t just Safari; it’s the engine rendering web content inside other iOS apps, so these flaws are reachable almost anywhere a link opens, not only in the browser. Most are memory-safety bugs triggered just by loading malicious content.” He added that while none of the flaws have been exploited yet, the early release is a proactive measure.

According to Apple, none of the 29 patches address zero-day vulnerabilities that have been actively exploited in the wild. However, the company stressed that attackers can still weaponize the bugs now that they are publicly known. Users who delay updates remain exposed to potential malware installation, data theft, and other security breaches.

AI forces earlier patching schedule

In a statement to Reuters, Apple explained that the decision to push the fixes out earlier than planned was driven by the rapid evolution of AI-powered hacking tools. The company noted that attackers are leveraging artificial intelligence to automate and accelerate the development of exploit code, narrowing the window between the discovery of a vulnerability and its exploitation in the wild.

Historically, technology companies like Apple and Microsoft have bundled security patches into regular feature updates, allowing a predictable schedule for both developers and users. But as AI lowers the barrier for creating sophisticated malware, that traditional cadence is becoming risky. Apple said it is now adapting by decoupling critical security fixes from major feature releases, ensuring that users receive protection sooner.

This shift reflects a broader industry trend. Security experts have long warned that AI would be a double-edged sword in cybersecurity. On one hand, AI tools help defenders detect anomalies and analyze threats faster; on the other, they empower attackers to craft more convincing phishing campaigns, automate vulnerability scanning, and generate exploit code with minimal human effort.

How users can stay safe

To update an iPhone or iPad, open the Settings app, tap General, and then tap Software Update. On a Mac, go to System Settings > General > Software Update. The download is typically a few hundred megabytes, and the installation requires a restart. Users should ensure their device is connected to Wi-Fi and has sufficient battery life or is plugged in.

In addition to installing the latest patch, users are advised to follow standard security practices: avoid clicking suspicious links, keep apps updated from the App Store, and enable automatic updates for OS and app layers whenever possible. Enterprises should also review their mobile device management policies to ensure compliance and rapid deployment.

The 26.5.2 update follows a similar pattern to previous emergency releases, but Apple’s explicit acknowledgment of AI as a driving factor marks a notable departure. In earlier years, the company typically attributed early patches to “active exploitation” reports, not to a proactive re-evaluation of the threat landscape. This shift underscores how profoundly AI is reshaping cybersecurity.

AI-assisted hacking is not hypothetical. Researchers have demonstrated generative AI models that can write phishing emails indistinguishable from human-written ones, and tools like WormGPT have been marketed on cybercriminal forums specifically for crafting malicious code. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has also warned that AI could enable state-sponsored actors to accelerate their offensive cyber operations.

For Apple, the challenge is maintaining its reputation for robust security while also delivering frequent updates that may inconvenience users. The company has historically prided itself on closed ecosystems and built-in protections, but the AI arms race demands a more agile response. Boynton noted that “the old approach is breaking down,” and he expects to see “smaller, more frequent updates” as a result.

The patches in this release were originally slated to debut with iOS 26.6, iPadOS 26.6, and macOS 26.6, which are still in beta and expected to ship in early to mid-July. By pulling the security fixes into a separate 26.5.2 release, Apple is effectively acknowledging that waiting even a few weeks could leave devices vulnerable to AI-generated attacks.

Apple’s move also puts pressure on other tech giants. Microsoft, Google, and Linux distributions have long used monthly or as-needed patches, but Apple’s previous reliance on yearly or twice-yearly major updates for security fixes is clearly changing. The company has not announced a permanent policy change, but industry observers expect similar rapid releases to become more common.

For now, iPhone, iPad, and Mac users are urged to update without delay. The vulnerabilities patched in WebKit alone could allow an attacker to execute arbitrary code with the user’s privileges, potentially leading to full device compromise. While no incidents have been reported yet, the window of opportunity for attackers has widened now that the flaws are public.

Owners of older devices that do not support the latest OS versions should also check if Apple has released security updates for their models. In some cases, the company provides limited patches for legacy software. However, the best defense remains a modern, updated device paired with cautious online behavior.

As AI continues to evolve, the cat-and-mouse game between cybersecurity defenders and attackers will only intensify. Apple’s decision to expedite this patch cycle is a clear signal that companies must adapt to the new reality — or risk leaving their customers exposed to a growing wave of AI-driven threats.

Source: ZDNET News