Update this weekiPhone, iPad & MacPhones & computers

Apple fixes a flaw used in targeted attacks on iPhones and Macs

Vendor says: “Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.” (Apple)
Who's affected: iPhone, iPad and Mac users.
Under attack?: Yes, in targeted attacks on specific people. Opening a malicious file can let an attacker run code on the device.
What to do: On iPhone or iPad: Settings, General, Software Update. On Mac: System Settings, General, Software Update. Until you've updated, don't open unexpected files from strangers.
Fixed in: iOS 26.7.1iOS 18.7.11 (older devices)macOS Tahoe 26.7.1macOS Sequoia 15.8.1
CISA deadline: Federal agencies must fix this by Oct 13, 2026. Everyone else should treat that as a ceiling, not a target.

CVE-2026-86950Severity score 8.8/10Chance of attack in 30 days: 26% (EPSS)Listed Sep 29, 2026Source: SecurityOnline ↗

Apple scorecard: every exploited Apple flaw →

Client notice ready to send

Fill in the bracketed parts, then paste into an email to your clients or team.

Subject: Security update: iPhone, iPad & Mac

Hi [Client name],

Attackers are actively exploiting a security flaw in iPhone, iPad & Mac.

Who's affected: iPhone, iPad and Mac users.

What we're doing: [We're checking your systems now and will have the fix in place by DATE.]

What to do: On iPhone or iPad: Settings, General, Software Update. On Mac: System Settings, General, Software Update. Until you've updated, don't open unexpected files from strangers.

Fixed in: iOS 26.7.1, iOS 18.7.11 (older devices), macOS Tahoe 26.7.1, macOS Sequoia 15.8.1
Reference: CVE-2026-86950 – https://securityonline.info/exploited-apple-zero-day-vulnerability-cve-2026-86950/

We'll confirm once everything is updated. Reply here with any questions.

[Your name]

Apple fixes a flaw used in targeted attacks on iPhones and Macs

Also under attack in Phones & computers