Apple ships its first background security update for iPhone, iPad and Mac
Without a full OS update, Apple fixed a Safari bug that could let a malicious site read another site's data.
What's new?
Apple released its first "Background Security Improvement." This type of update arrives without a full iOS release and needs only a quick restart.
What was the bug?
A flaw in WebKit, the engine behind Safari (CVE-2026-20643). According to Apple, maliciously crafted web content could bypass the Same Origin Policy, meaning a malicious site could access data from another site in the same browser session.
The bug was reported by Thomas Espach.
Which devices?
- iOS 26.3.1 and iPadOS 26.3.1
- macOS 26.3.1 and macOS 26.3.2
Receiving this type of update requires iOS, iPadOS or macOS 26.1 or later.
For you
If your device asks to restart, don't put it off.
Founder and editor-in-chief of Kurd Developers. Phone and tech news on YouTube, Instagram and TikTok.
More stories
One text can break your phone: Android's 'SMS of Death' explained
A flaw in Android 12 and later lets a specially crafted SMS drop calls and even make a phone unusable. The fix is in October's security patch.
GTA VI lands November 19: prices, editions and what to know
Rockstar has locked the date: Thursday, November 19 on PS5 and Xbox Series X|S. Standard costs $79.99 and Ultimate $99.99.
Apple's first touchscreen MacBook Pro brings OLED and Dynamic Island
The new PROLED XDR display responds to touch, the notch is gone and Dynamic Island takes its place. Prices start at $2,899.
The $1,999 iPhone Duo Has a Black-Bar Problem, and Fixing It Is Harder Than It Looks
Apple's first foldable is a hardware flex. But unfold it and many of your apps shrink into a phone-shaped window floating in black. Here's why the app world wasn't ready, and why developers can't just hit "stretch".