Apple has issued a global alert to iPhone and iPad owners, recommending the immediate installation of a new security update for their operating systems. The measure was taken after the discovery of two critical vulnerabilities that, according to the company, may already be actively exploited by attackers. The update fixes security holes that could allow malicious code to run on devices.

The flaws were identified in WebKit, the browser engine that underpins Safari and other internet-enabled applications in the Apple ecosystem. The criticality of the problem lies in the fact that an attacker could gain control over the device simply by making the victim access a web page specially created to exploit the breach, without the need for any other interaction.

The company did not disclose in-depth technical details about the attacks or who was behind them, a common practice to prevent more malicious actors from taking advantage of flaws before most users have time to update their devices. We recommend that all users check the availability of the update and install it as soon as possible to ensure the protection of their personal data.

Details about patched vulnerabilities

The two security holes fixed by Apple are considered “zero-day”, which means they were exploited by criminals before the manufacturer itself was aware of their existence. The first vulnerability, tracked as CVE-2026-3432, allowed the processing of malicious web content to lead to arbitrary code execution, essentially giving the attacker the ability to run unauthorized programs on the victim’s device.

The second flaw, identified as CVE-2026-3439, also related to WebKit, could be exploited to bypass the operating system’s security protections. Combinadas, these vulnerabilities posed a significant risk to data integrity and user privacy. The discovery was credited to an anonymous researcher, highlighting the importance of security community collaboration in identifying threats.

How to perform the security update on your device

Keeping your iPhone or iPad’s operating system up to date is the main barrier to protection against digital threats. The process for installing the new version is simple and can be done directly on the device, without the need for a computer.

To start the process, the user must access the “Settings” menu and then tap “General”. On the next screen, the “Software Update” option will display the new version available for download and installation. It is essential that the device is connected to a stable Wi-Fi network.

Apple also recommends that the device has at least 50% battery or is connected to a power source throughout the procedure. Isso prevents the device from turning off unexpectedly, which could cause problems with system installation.

Devices compatible with the new update

The security update has been made available for a wide range of Apple devices, covering models released in recent years. It is crucial that owners check whether their device is on the compatibility list to ensure protection. The list of iPhones that receive the security patch includes all models from the iPhone On the tablet side, the update is available for the 12.9-inch iPad Pro (2nd generation and later), 10.5-inch iPad Pro, 11-inch iPad Pro (1st generation and later), iPad The broad coverage demonstrates how seriously the company took the threat, seeking to protect the largest user base possible against ongoing attacks.

What are zero-day attacks

“Zero-day” or “zero-day” attacks are particularly dangerous because they exploit software flaws unknown to the developer or the public. The term “zero day” refers to the fact that developers have zero days to fix the problem before it is exploited by hackers.

These vulnerabilities are highly valued in the digital underground market as they allow attackers to bypass the most robust security defenses. Geralmente, are used in targeted and sophisticated attacks against high-value targets, such as activists, journalists and government figures.

Impact on other operating systems of Apple

As WebKit is a component shared by several Apple products, the vulnerabilities were not restricted to just iOS and iPadOS. The company also released emergency updates for other systems, such as macOS, which powers the Mac computers, and watchOS, used in the Apple Watch.

Users of Macs and Apple Watches are also advised to check and install the latest updates for their respective operating systems to ensure that the security hole is completely closed across the entire ecosystem of devices they use.

Company’s track record of proactive fixes

This is not the first time that Apple has released a security update urgently to fix zero-day flaws. Over the past few years, the company has intensified its efforts to quickly identify and patch vulnerabilities that are being actively exploited, in a constant race against hacker groups.

These actions reinforce the importance of the automatic update function, which ensures that devices receive patch packages as soon as they are available. The company’s transparency in admitting that the flaws were being exploited serves as a crucial warning so that users do not delay installing security fixes.

Additional recommendations for protecting your data

In addition to keeping the operating system up to date, there are other measures that users can take to strengthen the security of their devices and personal information. Constant vigilance is a powerful tool against cyberattacks.

It is essential to be suspicious of links and attachments received via email or messages from unknown senders. Essa is one of the main gateways for installing malicious software on devices.

Using strong and unique passwords for each online service is another essential recommendation. Evitar password repetition prevents leaking credentials on one website from compromising the security of other accounts.

Enabling two-factor authentication (2FA) whenever possible adds an extra layer of protection. Mesmo Before an attacker discovers your password, he will still need a second code, usually sent to your cell phone, to access the account.

The importance of rapid response to threats

Apple’s agility in releasing a fix to millions of devices around the world demonstrates the complexity of modern cybersecurity and the need for a robust infrastructure for distributing updates. The ability to quickly respond to an ongoing threat is a critical differentiator in protecting users from financial losses and privacy breaches.