Apple patches flaw linked to targeted iPhone attacks

Apple has released iOS 26.7.1 and iPadOS 26.7.1 to fix a security flaw that could let a maliciously crafted file run an attacker’s code on a device. The weakness is in a core graphics component used across Apple software, which is why matching fixes also arrived for Macs running macOS Tahoe and Sequoia. Apple says it received a report that the bug may have been used in an extremely sophisticated attack against specific people using versions of iOS before iOS 27; it has not identified the targets, attackers, or scale of the incidents. The alert does not mean ordinary users were broadly attacked, but Apple says the bug may have been used in a highly sophisticated attack before a patch was available—so supported devices should be updated promptly.