19th August 2026 – (Cupertino) Apple has released two critical software updates for iPhones, iOS 26.6.1 and iOS 18.7.10, addressing a raft of security flaws that researchers say could be chained to deliver spyware or seize deep control of a device. While the company typically limits technical detail to give users time to upgrade, both releases include significant patches for Webkit, the engine behind Safari, and multiple fixes in the Kernel at the heart of iOS.
Cybersecurity specialist Kate O’Flaherty reports that the updates arrive less than three weeks after iOS 26.6, which itself tackled a large number of issues. This time, experts highlight the risks from image‑parsing bugs and browser memory‑corruption flaws that can be triggered by malicious content alone. Jake Moore, global cybersecurity advisor at Eset, describes Webkit and Kernel fixes as the most pressing to watch, warning that Webkit flaws may be set off simply by visiting a booby‑trapped page, while Kernel bugs can open the door to full device compromise without a user installing anything.
Enterprise voices are echoing the alert. Adam Boynton of Jamf notes that one of the patched telephony issues could let an attacker in a privileged network position bypass IPSec authentication and intercept traffic, a particular concern for organisations relying on secure tunnels and remote access. Separately, Apple’s notes indicate that ImageIO vulnerabilities capable of arbitrary code execution have been addressed, a class historically abused in “zero‑click” attacks where merely receiving a crafted image via messages or email can be enough to infect a handset.
The company has also shipped macos Tahoe 26.6.2 to tackle many of the same weaknesses and confirmed an additional maintenance path for older iPhones via iOS 18.7.10, reinforcing that devices stuck on earlier major versions still receive hardening. None of the newly fixed vulnerabilities are confirmed as exploited at the time of writing, but once update details circulate, unpatched users become softer targets.
The practical advice is simple and urgent. Because automatic updates can lag, iPhone owners should install iOS 26.6.1 or iOS 18.7.10 manually today by heading to Settings, General, Software Update. Security professionals stress that prompt patching closes attack windows before criminals can weaponise the flaws, safeguarding both personal users and workplaces that depend on mobile devices.