Apple Patches 30+ iOS, macOS, Safari Flaws, Including AI-Discovered Web Kit Bugs

Summary: Apple released security updates for iOS, iPadOS, macOS Tahoe, and Safari on Monday, all at version 26.5.2, addressing over three dozen flaws including nearly 30 in WebKit. Four WebKit vulnerabilities were found using AI tools, with OpenAI Codex Security credited for three and Anthropic researchers Milad Nasr and Nicholas Carlini, along with Claude, acknowledged for CVE-2026-43715; none of the patched flaws has been disclosed as actively exploited.
What's compelling: Apple told Reuters it is shipping updates earlier than before because AI can shrink the window between discovery and weaponization to hours - the same AI tooling that surfaced these WebKit bugs is available to whoever wants to find the next one.

Read the original at The Hacker News ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-39868 CVE-2026-43715 CVE-2026-43720 CVE-2026-43722 CVE-2026-43724 CVE-2026-43725
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026