Apple released iOS 26.5.2, macOS Tahoe 26.5.2, and Safari 26.5.2 weeks early, pulling nearly 30 security fixes from the planned iOS 26.6 cycle due to concerns about AI accelerating exploit development.
Four WebKit bugs were discovered by AI tools — three by OpenAI Codex Security (CVE-2026-43707, CVE-2026-43716, CVE-2026-43745) and one by Anthropic researchers using Claude (CVE-2026-43715). Critical kernel fixes by Hyunwoo Kim and STAR Labs researchers were also included.
