EXPLORINEER
en

DE — heise online

Security: Apple patches many holes again – including for older operating systems

Security1 min read

Apple has fixed many security holes in its newest operating systems, including iOS 27.2, macOS 27.2 and iPadOS 27.2. Older systems also got updates. A security firm also plans to publish details of a new iPhone jailbreak.

What happened

Apple released updates that fix more than 150 security flaws each in iOS 27.2, macOS 27.2 and iPadOS 27.2. Apple lists them in its release notes. Some researchers used AI tools to find the bugs. The firm Calif.io is named several times in the credits. Apple does not list bugs that are already being used in attacks, called exploits. But the security firm Calif.io released an untethered jailbreak for iPhones up to iOS 27.0.1 and iOS 27.1. A jailbreak lets a user break out of the limits Apple sets on a device. The firm plans to publish the details, so exploit tools may appear soon.

Key numbers and facts

  • More than 150 fixes each in iOS 27.2, macOS 27.2 and iPadOS 27.2.
  • Fixes cover many parts of the system, including the App Store, CloudKit, the kernel and the WebKit browser engine.
  • Some flaws can be used for remote attacks, meaning the attacker does not need physical access.
  • Older systems got updates too: iOS and iPadOS 26.7.2, iOS and iPadOS 18.7.11, macOS 15.8.2 (Sequoia) and macOS 26.7.2 (Tahoe).
  • tvOS 27.2, watchOS 27.2 and visionOS 27.2 also have important security fixes.

Why it matters

Security holes can let attackers steal data or take control of a device. Users should update quickly. A public jailbreak tool could make older iPhones easier to attack, so installing the latest update is important.

What to watch

  • Whether Calif.io publishes the details of the iPhone jailbreak.
  • Whether working exploit tools appear for iOS 27.0.1 and iOS 27.1.
  • What the unclear tvOS 26.6.1 update changes, since Apple has not said.
  • Whether more bugs found with AI tools are fixed in later updates.

Glossary

Calif.io
A security company that found flaws in Apple systems and plans to publish details of an iPhone jailbreak.
WebKit
The browser engine that loads web pages in Apple's browser Safari and other apps.
CloudKit
Apple's system for storing and syncing user data in the cloud.

Same story, different eyes

Ad

Add 150 words. Learn 10 a day.

Dicter word books send only the words you learn to your review notes.

More in this topic

SecurityITmedia

So-net Leaks Data of About 2.59 Million Members; Passwords Also Exposed for Some Email Services

Sony Network Communications said unauthorized access to the member database of its So-net internet service led to the leak of about 2.59 million member records, including those of former members who had already left. For some email services, about 54,000 email addresses and their passwords were also leaked, and the company has reset those passwords and asked users to reset them. No credit card information or member passwords were confirmed as leaked, and no secondary damage has been confirmed so far.

SecurityITmedia

GMO Offers Bounty of About 150 Million Yen for Clues to Unauthorized Access Perpetrators

GMO Internet Group announced on October 27, 2026 a reward program with a total of US$1 million (about 150 million yen) for information that helps clarify the unauthorized access to "Onamae.com Desktop Cloud," a VPS for automated FX trading offered by subsidiary GMO Internet. Information submissions open at noon on October 28 through a dedicated channel, and the program will continue until the culprits are arrested. The company says the reward is a maximum total for the entire program, not a per-person payment, and that payments will not be made to perpetrators or to those who obtained information illegally.

Security전자신문

[AI Guarding AI] Microsoft Extends Project Perception to Protect Internal AI Agents, Not Just External Threats

Microsoft says AI security must now cover internal AI agents that access enterprise data, tools, and systems, not only external AI-powered attacks. Its Project Perception, unveiled in July, combines signals, security context, models, and specialized Red, Blue, and Green agents into a continuously learning defense system, with humans retaining final control over key decisions. The company also describes "agentic insiders," offers layered protection and dynamic risk scoring, and provides traceability so security teams can monitor agent behavior and adjust policies.

SecurityITmedia

GMO Confirms Attacker Published Information; Investigating Whether Customer Data Is Included, Considering Additional Condolence Payments

GMO Internet Group said that at 12:30 p.m. on October 27 it confirmed the publication, apparently by an attacker, of information that appears to concern customers, related to unauthorized access to its FX auto-trading VPS "Onamae.com Desktop Cloud." The company is still investigating the contents, which may include inaccurate information, and is considering additional condolence payments for affected users whose information was published, beyond the flat 5,000-yen payment announced earlier.