Apple on CuraSec

Apple Patches 108 Vulnerabilities in iOS, iPadOS, and macOS

Tue, 18 Aug 2026 11:37:25 +0000

Engineer — Plan: 108 CVEs across iOS/iPadOS and macOS 26 is a large batch worth prioritizing; schedule updates for macOS developer workstations and managed iOS fleet this patch cycle — no KEV or PoC signals to force emergency action.
SOC/IR — Skip
Leader — Skip

iCloud Private Relay IP Leak via WebKit Proxy Bypass

Thu, 06 Aug 2026 13:03:19 +0000

Engineer — Learn: No CISA KEV, no PoC exploitation pressure, and Private Relay is a consumer privacy feature — no enterprise infrastructure to patch or reconfigure. Worth noting if Safari/WebKit is used in managed environments where IP privacy is a control assumption.
SOC/IR — Skip
Leader — Skip

Apple July 2026 Patch Round: OS and Safari Updates

Wed, 29 Jul 2026 13:07:14 +0000

Engineer — Plan: Ensure managed Apple devices and Safari are updated to the July 2026 releases; prioritize macOS 26 and Safari patches, and note that macOS 14/15 received separate coverage — audit fleet version distribution.
SOC/IR — Skip
Leader — Skip

Apple macOS Tahoe 26.6 Security Update Released

Wed, 29 Jul 2026 13:07:14 +0000

Engineer — Plan: Apple’s security content page for macOS Tahoe 26.6 lists patched CVEs with no enrichment signals indicating active exploitation; schedule deployment of macOS 26.6 to managed endpoints and review the full CVE list for any vulnerabilities affecting shared components (e.g., WebKit, kernel) that may also surface in server or CI runner environments.
SOC/IR — Skip
Leader — Skip