Apple Rushes Critical Security Updates for iOS 26.2 After WebKit Flaws Exploited

Apple has confirmed the release of a critical update, iOS 26.2, aimed at fixing severe security vulnerabilities affecting potentially more than a billion iPhones globally, according to Forbes on Saturday, December 13, 2025. This urgent software patch addresses two specific WebKit flaws that security researchers confirmed were actively being exploited in the wild, posing a significant risk to the privacy and security of users. WebKit, the engine powering the Safari browser and used throughout the iOS ecosystem, is a frequent target for sophisticated threat actors attempting to gain unauthorized access to devices, making immediate patching absolutely essential for all iPhone owners.

Details provided by The Hacker News indicate that the discovery and exploitation of these two specific zero-day vulnerabilities required rapid intervention from Apple's security teams. When flaws are found to be exploited 'in the wild,' it means attackers have already developed working exploits and are using them against real-world targets, necessitating that users install the new iOS 26.2 patch without delay. The severity of WebKit flaws often stems from their ability to allow remote code execution simply by a user visiting a malicious website, compromising the integrity of the device’s operating system and stored data, including personal communications, banking information, and credentials.

While the scope of the attacks exploiting these flaws has not been fully disclosed, the sheer volume of devices requiring the update—estimated to be over one billion iPhones—underscores the global impact of the vulnerability. Security experts are strongly urging all Apple users to immediately check their settings and download iOS 26.2 to mitigate the risk of falling victim to the ongoing campaigns leveraging these exploited flaws. This sequence of events highlights the constant, high-stakes battle between technology providers and cybercriminals attempting to breach mobile device security.