Claude, Codex, and other AI tools credited in today’s Apple security releases

Apple credited Anthropic's Claude, OpenAI's Codex Security, Z.AI's GLM, and NVIDIA's AI Red Team in security releases for iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, tvOS 26.6, visionOS 26.6, and watchOS 26.6, highlighting the growing role of AI tools in vulnerability research. Anthropic researchers and Claude were credited for fixes involving WebKit, WebKit Storage, and WebDAV, while Calif.io researchers—who previously used Anthropic's Mythos Preview model to build a macOS exploit in five days—were credited for multiple kernel fixes across all updates.

Apple’s technical details on the many security fixes included in today’s operating system updates show how quickly AI tools are becoming part of vulnerability research. Here are the details. AI tools credited across Apple’s updates Earlier today, Apple released: iOS 26.6 https://9to5mac.com/2026/07/27/ios-26-6-now-available-whats-new/ iPadOS 26.6 https://9to5mac.com/2026/07/27/apple-releases-ipados-26-6-heres-whats-new/ macOS Tahoe 26.6 https://9to5mac.com/2026/07/27/macos-26-6-now-available-heres-whats-new/ macOS Sequoia 15.7.8 https://9to5mac.com/2026/07/27/macos-sonoma-14-8-8-and-macos-sequoia-15-7-8-now-available/ macOS Sonoma 14.8.8 https://9to5mac.com/2026/07/27/macos-sonoma-14-8-8-and-macos-sequoia-15-7-8-now-available/ tvOS 26.6 https://9to5mac.com/2026/07/27/apple-releases-tvos-26-6-and-homepod-26-6/ visionOS 26.6 https://support.apple.com/en-gb/128070 watchOS 26.6 https://9to5mac.com/2026/07/27/watchos-26-6-available-now-for-apple-watch-heres-whats-new/ As soon as the updates were rolled out, Apple updated its security releases page https://support.apple.com/100100 with more information on several of the issues addressed, including the affected components and devices, their potential impact, how Apple fixed them, and the researchers credited with reporting them. One notable detail in today’s documents is their sheer length, especially considering that Apple released the 26.5.2 updates less than a month ago and said they included fixes originally planned for the 26.6 release cycle https://9to5mac.com/2026/06/29/apple-accelerates-security-updates-in-response-to-ai-powered-hacking-risks/ . Another notable detail is that Anthropic researchers and Claude are credited with fixes involving WebKit, WebKit Storage, and WebDAV, some of which were made alongside researchers from Calif.io. That is the same research team that said in May https://9to5mac.com/2026/05/14/calif-team-details-how-anthropic-mythos-helped-build-a-working-macos-exploit-in-five-days/ it had used Anthropic’s Mythos Preview model to help build a working macOS kernel memory corruption exploit on M5 silicon in just five days. The Calif is credited for several kernel security fixes in every operating system update released today, alongside more than a dozen researchers credited for those vulnerabilities, suggesting that multiple teams independently reported the same underlying issues. In fact, Apple addressed many other kernel vulnerabilities in this release cycle, with 30 distinct CVEs listed across all of today’s operating system updates. It is also worth noting that Apple has had access to Claude Mythos Preview through Anthropic’s Project Glasswing https://www.anthropic.com/glasswing since April. As a result, the number of vulnerabilities found internally with Claude could be higher than the public credits suggest. Finally, Anthropic is not the only AI company represented in today’s notes. Apple also credits work involving OpenAI Codex Security, Z.AI’s GLM, and NVIDIA’s AI Red Team, among others. While some of those names also appeared in last month’s security notes, today’s updates are further proof of how quickly AI-assisted security research is evolving, and how companies will have to move quickly to adjust their update schedules and bug bounty programs https://github.blog/security/next-chapter-restructuring-githubs-bug-bounty-program/ to this new reality. Worth checking out on Amazon Geoffrey Cain – ‘Steve Jobs in Exile’ https://amzn.to/4v3CS5Q David Pogue – ’Apple: The First 50 Years’ https://amzn.to/46Y3nQj MacBook Neo https://amzn.to/47vJmkn Logitech MX Master 4 https://amzn.to/3KmIQN7 AirPods Pro 3 https://www.amazon.com/Apple-Cancellation-Translation-Headphones-High-Fidelity/dp/B0FQFB8FMG?tag=marcmendes-20 AirTag 2nd Generation – 4 Pack https://amzn.to/4sewc3a Apple Watch Series 11 https://amzn.to/46VomDB Wireless CarPlay adapter https://www.amazon.com/gp/product/B0F6T6N2B1?tag=marcmendes-20 FTC: We use income earning auto affiliate links. More. https://9to5mac.com/about/ affiliate our homepage http://9to5mac.com/ for all the latest news, and follow 9to5Mac on exclusive stories https://9to5mac.com/feature/exclusive/ , reviews https://9to5mac.com/guides/review/ , how-tos https://9to5mac.com/guides/how-to/ , and subscribe to our YouTube channel https://www.youtube.com/9to5mac