Cybersecurity
Apple has released iOS 27.2.1 — an urgent security-only update for iPhone, with no new features.
Apple has released iOS 27.2.1 — an urgent security-only update for iPhone, with no new features. The update fixes nine security flaws, and the headline one sits in iMessage: a remote attacker could join a group chat and receive its messages, while someone added to a group could read messages sent before they joined.
It also patches Bluetooth and AirPlay pairing flaws — including unauthorised pairing without user interaction and pairing-code rate-limit bypasses — plus App Intents and a Brotli memory-corruption flaw. The same patch ships as iPadOS 27.2.1, macOS Golden Gate 27.2.1, watchOS 27.2.1 and visionOS 27.2.1, with patches for older devices too (iOS 26.7.3 and 18.7.12).
The update covers iPhone 11 and later. Apple has not said any of these flaws were exploited in the wild — but with a group-chat privacy flaw in play, this is one to install now: Settings > General > Software Update.
Note: this is a separate update from the "worse_query" iOS flaw reported earlier — Apple has not confirmed that flaw is fixed here.
Source: MacRumors / Apple
