{"slug": "ios-27-and-macos-27-are-loaded-with-security-fixes-heres-why", "title": "iOS 27 and macOS 27 are loaded with security fixes–here’s why", "summary": "Apple's iOS 27 update fixes 122 security vulnerabilities and macOS 27 lists 204 fixes, according to Apple's Security Updates page, an unprecedented jump driven by AI coding agents that both attackers and security researchers now use to find flaws. The counts follow 35 fixes in iOS 26.0, 43 in iOS 26.5, 29 in the security-only iOS 26.5.2, and 79 in iOS 26.6.7, while watchOS 27 adds about 90 fixes. The article attributes the surge to an AI-accelerated arms race between hackers exploiting vulnerabilities and researchers reporting and patching them, including Anthropic's Project Glasswing collaboration with Apple and other companies.", "body_md": "It used to be that operating system “point releases”—the minor updates throughout the year—contained around a dozen security vulnerability fixes. But that number has been growing in the last couple of years and has exploded in the past few months.\n\nThere were 35 security vulnerabilities fixed in iOS 26.0. That was up to 43 in iOS 26.5. A 26.5.2 update solely for security fixes added another 29 and iOS 26.6.7 [adds 79 more](https://support.apple.com/en-us/149041).\n\nBut that’s nothing compared to the latest round of updates. There are an unprecedented *122 security vulnerabilities fixed* in [iOS 27](https://support.apple.com/en-us/149034). Think that’s a lot? The macOS 27 update has [204 fixes listed on Apple’s Security Updates page](https://support.apple.com/en-us/149035). Even [watchOS 27](https://support.apple.com/en-us/149037) adds about 90 fixes.\n\nThanks to AI coding agents, this is the new normal. You can expect dozens of security vulnerabilities to be fixed every couple of months, at least for a while.\n\nYou can thank, and blame, AI for this.\n\nAI coding agents have gotten good. Very good. Not only has “vibe coding” become commonplace, but the best AI models can analyze and test very large code blocks and databases. And they find things that people miss.\n\nA few months ago, we wrote about [Project Glasswing](https://www.macworld.com/article/3122026/how-ai-is-working-to-make-your-iphone-nearly-impervious-to-attacks.html), a collaboration between Anthropic and a handful of other companies (including Apple) to provide those companies’ security researchers with access to the company’s most advanced AI model, in the hopes of finding vulnerabilities before the models become public and all the bad actors get their hands on them.\n\nThe world we live in right now is one of security acceleration. Hackers and malicious groups can use advanced AI tools to find unique vulnerabilities that can, sometimes in combination with each other, compromise systems like never before. The sort of resources and research once only available to nation-states and the largest tech corporations are now broadly available.\n\nBut AI is having just as much of an impact on the positive side. Security researchers are using these tools to find more vulnerabilities than ever, reporting them to software companies, who now, thanks to AI coding tools, have the scope to address more of them more quickly.\n\nFor the time being, we’re in an AI-accelerated arms race between the hackers who use AI to find vulnerabilities and exploit them, and the researchers and developers who use AI to find vulnerabilities and fix or report them. And it’s resulting in increasingly large and important security update releases.\n\nThis may eventually wind down, as the AI coding tools get sophisticated and commonplace enough to more thoroughly test massive code databases and all their interactions with other code before its ever released. But for the time being, and likely for some time to come, expect operating system updates—including Apple’s—to fix a big list of security issues with every release.", "url": "https://wpnews.pro/news/ios-27-and-macos-27-are-loaded-with-security-fixes-heres-why", "canonical_source": "https://www.macworld.com/article/3200215/apple-os-updates-security-patches.html", "published_at": "2026-09-14 19:12:00+00:00", "updated_at": "2026-09-14 23:06:40.686163+00:00", "lang": "en", "topics": ["artificial-intelligence", "ai-agents", "ai-tools", "ai-safety"], "entities": ["Apple", "iOS 27", "macOS 27", "watchOS 27", "Anthropic", "Project Glasswing", "iOS 26.0", "iOS 26.6.7"], "alternates": {"html": "https://wpnews.pro/news/ios-27-and-macos-27-are-loaded-with-security-fixes-heres-why", "markdown": "https://wpnews.pro/news/ios-27-and-macos-27-are-loaded-with-security-fixes-heres-why.md", "text": "https://wpnews.pro/news/ios-27-and-macos-27-are-loaded-with-security-fixes-heres-why.txt", "jsonld": "https://wpnews.pro/news/ios-27-and-macos-27-are-loaded-with-security-fixes-heres-why.jsonld"}}