Apple Patches 28 Security Flaws in macOS, iOS, and iPadOS

Apple has put out security updates for macOS, iOS, and iPadOS. These updates fix 28 problems that could let users lose data, crash apps, access kernel memory, and run unwanted code. The updates came out on August 17, 2026. They have macOS Tahoe 26.6.2, iOS 26.6.1, iPadOS 26.6.1, iOS 18.7.10, and iPadOS 18.7.10. The company said these patches fix issues from earlier iOS, iPadOS, and macOS beta versions.

Apple keeps technical details about security flaws secret until it finishes its investigation and releases security updates to everyone. Several flaws affect parts that handle media, web content, and graphics. Apple fixed an overflow issue in ImageIO that might let a specially made image run unwanted code. Another problem in ImageIO could make a vulnerable device crash when it processes a harmful image.

• Vulnerabilities

Critical WordPress Plugin Flaw Exposes 600,000 Sites to Attacks

By infosecbulletin / Tuesday , August 18 2026

A big security flaw in the Forminator Forms WordPress plugin might let unapproved users upload harmful PHP files. This could...

Read More

• Alert
• Vulnerabilities

Apple Patches 28 Security Flaws in macOS, iOS, and iPadOS

By infosecbulletin / Tuesday , August 18 2026

Apple has put out security updates for macOS, iOS, and iPadOS. These updates fix 28 problems that could let users...

Read More

• Alert

DoNot (APT-C-35) Targeting Bangladesh Military Personnel

By infosecbulletin / Monday , August 17 2026

Bangladesh's military and defense system is actively under targeted attack linked to DoNot Team, or APT-C-35, as stated in a...

Read More

• Hot Topic

McDonald’s, Vodafone Affected by Azure Theft Campaign Exposing Millions of Records

By infosecbulletin / Sunday , August 16 2026

A large Azure data theft campaign is surfacing on the dark web. A hacker is offering employee lists taken from...

Read More

• International

NIST to Modernize NVD in the Age of Artificial Intelligence

By infosecbulletin / Sunday , August 16 2026

National Institute of Standards and Technology (NIST) demands feedback from industry and the government on how to update the National...

Read More

• Alert

ALERT
Multiple TP-Link Flaws Allow to Bypass Auth and Escalate Privileges

By infosecbulletin / Friday , August 14 2026

TP-Link has revealed several serious security flaws in Aginet networking products managed by ISPs. This includes mesh systems, routers, PON...

Read More

• Hot Topic

LiteLLM supply chain attack reveals 153GB of stolen credentials online

By infosecbulletin / Friday , August 14 2026

153GB record surface online stolen during the LiteLLM supply chain attack linked to thousands of corporate domains, including AWS, Samsung,...

Read More

• Alert
• Cyber Attack

PATCHCORD Backdoor Targets Telecom and CII In South Asia

By infosecbulletin / Friday , August 14 2026

A previously undocumented backdoor called PATCHCORD actively target telecom and critical information infrastructure (CII) in South Asia. According to Acronis...

Read More

• Alert

Fortinet Fixes Multiple Flaws in FortiWeb, FortiManager, and FortiClient

By infosecbulletin / Friday , August 14 2026

Fortinet has released fixes for a set of authentication flaws in its FortiWeb, FortiManager, and FortiClient products. It warns admins...

Read More

• Alert

“City-Forum” Campaign
“City-Forum” Campaign Attacks Salesforce and ServiceNow Instances Worldwide

By infosecbulletin / Thursday , August 13 2026

A data theft plan is stealing information from anonymous users on Salesforce Experience Cloud and ServiceNow customer portals using special...

Read More

Apple Fixes 28 Security Vulnerabilities

The updates fix several problems in IOGPUFamily, which is an Apple graphics tool. Apple said that bad web content could harm memory.

Remote attackers could use other problems to shut down a system suddenly or let a local app view kernel memory. These issues are serious because the kernel has high permissions and manages important operating system tasks.

An extra kernel-level problem in the older iOS 18.7.10 and iPadOS 18.7.10 versions could let a bad app run harmful code with kernel control through a buffer overflow. Apple fixed this problem by better checking sizes. Apple also fixed an Audio logic issue that could let an app reveal private user information. They solved it by adding better checks. This problem affects both macOS Tahoe 26.6.2 and the new iOS and iPadOS versions.

The mobile updates have a fix for Accessibility for devices on iOS 18.7.10 and iPadOS 18.7.10. Apple said someone with direct access could get sensitive data when using iPhone Mirroring. This feature connects an iPhone to a Mac. The problem was fixed by better state management.

Apple fixed an IPSec authentication problem in iOS 26.6.1 and iPadOS 26.6.1. A bad actor with special access could get around IPSec authentication and capture network data, which is dangerous for users on risky or hacked networks.

iOS 26.6.1 and iPadOS 26.6.1 are available for iPhone 11 and later, supported iPad Pro models, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later.

The iOS 18.7.10 and iPadOS 18.7.10 updates keep older devices like the iPhone XS, iPhone XS Max, iPhone XR, and iPad 7th generation safe. Users should update quickly. Apple says you cannot go back to an older version of software for iPhone, iPad, Apple TV, Apple Watch, and Vision Pro after updating.