🚨 Apple users: update your MacOS, iOS and iPadOS to either 27.2 or 26.7.2, depending on what version you are running (better to be on 27). This release patches 286 vulnerabilities and and fixes an exploited CoreGraphics zero-day to older iPhones (iOS 18). Roughly 140 of the security holes are shared across the two operating systems. Some of the fixed stuff: - Memory corruption bugs in WebKit, the kernel and components that handle images, fonts, PDFs, audio and video files, some of which could be exploited for arbitrary code execution. - Flaws that could let apps access sensitive user data or bypass privacy preferences - WebContent sandbox escapes - Kerberos KDC impersonation issue - A bug that could give a nearby attacker access to a Thread network. - Privilege escalation flaws that could give apps root access, as well as sandbox escapes, Gatekeeper bypasses and kernel memory corruption issues in file system and disk image components. - Security holes in Screen Sharing, Remote Management and SMB that can be targeted remotely or from the local network, including a Remote Management bug that could allow a remote attacker to execute arbitrary code.