iPhone Exploits, Zero-Days Put Millions at Risk
Apple’s security year so far has been anything but quiet. The company’s 2026 security cycle has been dominated by a steady stream of updates across iOS, iPadOS, macOS, watchOS, tvOS, visionOS, and Safari, with most major platforms now on versions 26.5 or later. Below is a breakdown of the company’s key security events so far this year. Apple’s first zero-day of 2026 One of the most significant security events of the year came in February, when Apple disclosed CVE-2026-20700, a vulnerability affecting a core operating system component known as dyld. The flaw could allow attackers to execute malicious code on vulnerable devices. Apple warned that it had been used in what the company described as “extremely sophisticated” attacks against specific individuals. The issue affected iPhones, iPads, Macs, Apple Watches, Apple TVs, and Vision Pro devices before Apple released patches through iOS 26.3, iPadOS 26.3, macOS Tahoe 26.3, watchOS 26.3, tvOS 26.3, and visionOS 26.3. According to Apple’s advisory, “An attacker with memory write capability may be able to execute arbitrary code.” Researchers noted that the …









