Apple rushes 29 security fixes after AI threat shift

Apple rushes – Apple has released iOS 26.5.2, iPadOS 26.5.2, and macOS 26.5.2 to patch 29 security vulnerabilities, including multiple WebKit issues. The company rolled the fixes out sooner than expected, saying AI-driven security threats are forcing faster turnaround—before

A new iPhone, iPad, or Mac update is out, and Apple is moving faster than the usual rhythm.

On Monday, Apple released iOS 26.5.2, iPadOS 26.5.2, and macOS 26.5.2. Owners are being urged to install the update even though none of the 29 patched vulnerabilities have been exploited by attackers so far.

The urgency comes with a familiar warning: hackers can still target these holes now that the details are public. In this update, Apple says some of the fixes address bugs in the OS kernel, while most focus on security flaws in Apple’s WebKit browser engine.

The most worrying part isn’t only Safari. Adam Boynton. senior enterprise strategy manager at security provider Jamf. put it plainly: “WebKit isn’t just Safari. it’s the engine rendering web content inside other iOS apps. so these flaws are reachable almost anywhere a link opens. not only in the browser.” He added that most of the issues are memory-safety bugs triggered just by loading malicious content. The reason that matters is reach. If an attacker can get a device to render hostile content in places beyond the browser. the attack surface grows quickly.

None of the 29 vulnerabilities are zero-days reported as exploited in the wild. That’s the difference between a patch arriving in time and a patch arriving after damage. Boynton specifically described the point of shipping early: “None has been exploited yet. which is the whole point of shipping early.”.

Apple also says it didn’t wait for the next planned release window. The patches were already available in the current beta releases for iOS 26.6, iPadOS 26.6, and macOS 26.6. That suggests Apple had been preparing to include the fixes in the official 26.6 updates. expected in early or mid-July—until something shifted.

In a Monday story published with subscription required. Apple told Reuters it is deploying a series of software updates that would otherwise have been included in a new version of its operating systems. The reason: AI-powered security threats, according to the company. Apple said the plan change is a response to AI-driven security concerns. and that it needs to reduce the time between announcing new security fixes and releasing them to the general public.

The stakes are simple. Security teams have traditionally bundled fixes into regular update cycles. But as attackers accelerate with AI, companies can’t afford to leave serious bugs waiting for the next feature release. Boynton summed up the friction between the old and new timelines: “Bundling fixes into big feature releases worked when you had weeks before a flaw got exploited. and that buffer is gone. So Apple pulled these fixes out of the feature cycle, and I’d expect smaller, more frequent updates as a result. I wouldn’t call it a permanent policy of one release, but the direction is clear.”.

For iPhone and iPad users, Apple’s instructions are straightforward: open Settings, select General, then choose Software Update, download, and install the latest update. On Mac, the same logic applies through System Settings: General, then Software Update, and install.

For now, the headline is reassurance without complacency: the vulnerabilities in Apple’s latest patch have not been exploited yet, but they are still exploitable—and Apple is treating the window between “known” and “weaponized” as something it can’t afford to shrink slower than the threat.

Apple iOS 26.5.2 iPadOS 26.5.2 macOS 26.5.2 29 security flaws WebKit kernel vulnerabilities security update AI security threats Jamf Adam Boynton