Key takeaways
- Apple released iOS 27.2 on Monday, October 26, 2026, with more than 160 security fixes, according to MacRumors.
- iOS 26.7.2 carries many of the same fixes for iPhones not yet on iOS 27, which matters because Apple reportedly has about 80% of owners still on iOS 26.
- One fix backported to iOS 18 carries Apple's wording that it may have been exploited in a targeted attack, but Apple gave no details.
- Apple did not say any of the fixed flaws are known to be actively exploited, so this is a prompt-install situation, not an emergency.
Apple released iOS 27.2 on Monday, October 26, 2026, with more than 160 security fixes, according to MacRumors. The same day it shipped iOS 26.7.2 for iPhones that haven’t moved to iOS 27 yet, carrying many of the same patches. My advice is short: install one of them this week.
Should you install iOS 27.2 now?
For most people, yes. Open Settings > General > Software Update. Apple hasn’t said any of the fixed flaws are known to be actively exploited, per MacRumors, so this isn’t an emergency. But 160-plus patches is a long list to leave undone, and some touch Apple Intelligence and Hide My Email.
PCMag lists iPhone 11 and newer, plus iPhone SE (2nd generation) and newer, as able to install 27.2. If yours is on that list and you’re happy with iOS 27, take it. If you’d rather stay on iOS 26 for now, the 26.7.2 section below is for you.
What the security fixes cover
According to MacRumors, the update closes more than 30 WebKit bugs and roughly 15 kernel bugs. Two are easy to picture: an Apple Intelligence flaw that could let a remote attacker reach sensitive data, and a Hide My Email bug that could expose a user’s real address.
Calif, the group behind the launch-day iPhone Duo jailbreak, is credited on six CVEs. Its researcher Stefan Esser said most of the vulnerabilities behind an untethered iOS 27.0.1 jailbreak are fixed in 27.2, as MacRumors relays it. The word to notice is most. It doesn’t promise every hole is shut.
Credits also go to AI labs: three fixes name Anthropic Research and four name OpenAI. MacRumors links the growing fix counts to AI models getting better at finding vulnerabilities, though no outlet puts a number on how much.
What iOS 26.7.2 is for
iOS 26.7.2 is Apple’s security update for devices not yet on iOS 27. It includes many of the same fixes, and TechCrunch says many were backported from the new release. That matters because TechCrunch cites Apple’s own estimate that roughly 80% of iPhone owners remain on iOS 26.
So if you’re in that majority and don’t want iOS 27 yet, 26.7.2 is the update to install today. Just remember that many fixes isn’t every fix. Coverage doesn’t say which 27.2 fixes didn’t make it to 26.7.2, so the complete set sits on iOS 27.2. If you want everything Apple patched, that’s the one.
What Apple’s targeted-attack note means
Apple’s note applies to one fix, not the whole update. A single patch, backported to iOS 18, comes with Apple’s warning that it may have been exploited in a highly sophisticated attack aimed at particular individuals on iOS versions older than 27, according to TechCrunch.
TechCrunch says that’s standard language for suspected spyware or forensic-tool compromise. Apple gave no details.
Two reports, two emphases. MacRumors says Apple didn’t flag any flaw as known to be exploited. TechCrunch points to the hedged wording on this one fix. Both can be true. By Apple’s own description the targets are specific people, not the general public. Still, it’s the best reason for anyone on iOS 18 to update. Whether that fix is also in 26.7.2 hasn’t been reported.
What this means for your phone
If you’re on iOS 26, install 26.7.2 now and move to 27.2 when you’re ready. If you’re on iOS 18, update; that’s where the backported fix was aimed. If you’re already on iOS 27, 27.2 is the patch to get.
iPhone Duo owners have a particular reason. Calif jailbroke Apple’s first foldable on launch day, and 27.2 closes much of what that work exposed. It also adds Apple Pencil support, but only the Apple Pencil (USB-C) works. Apple Pencil Pro and other models don’t, per 9to5Mac and PCMag. Pencil input works in apps such as Notes and Preview. Our guides to Split View on the iPhone Duo and the best Duo apps by fold pose cover what to do with the extra screen.
If this update has you eyeing a new phone, our look at the best iPhone to buy, unlocked or carrier covers the trade-offs.
Features that might tip the decision
Security is the reason to update, but 27.2 also changes what the phone does. Siri AI can now recall earlier conversations and pull in photos attached in Messages, Calendar attendees and voicemails. It also draws more usefully on your Safari history and Reading List. A new Excluded Apps setting lets you pick the apps that Siri, Search and suggestions are kept out of.
Siri AI adds French, Japanese, Korean, Portuguese and Spanish, and it’s still labeled beta. It isn’t available in the EU or mainland China. Apple told PCMag it’s working with the EU to find a way forward. Device support is reported two ways: 9to5Mac says iPhone 16 models and later plus iPhone 15 Pro and 15 Pro Max, while PCMag says iPhone 15 Pro and later. Check Apple’s page for your model.
Smaller changes include suggested actions in Messages, an Apple Music icon that goes black and white, and a Podcasts Home tab split into New Episodes and Continue Playing. The redesigned Health app appeared in earlier betas but was pulled before release. Apple still plans it for later this year, per 9to5Mac.
What nobody has explained yet
- Which fix Apple says may have been used in a targeted attack, and who was behind it.
- Whether any of the 160-plus flaws were actively exploited. Apple hasn’t confirmed it either way.
- Which fixes are missing from iOS 26.7.2.
- Whether 27.2 addresses the Duo’s display and durability complaints. Early buyers have reported problems, though accounts are vague.
- How much of the rise in fixes comes from AI-assisted bug hunting.
Until Apple or researchers say more, the safe assumption is simple: patched is better than unpatched, and the fix list is long enough to justify the restart.
Tools & products mentioned
- iPhone Duo on Amazon — Check current price
- Apple Pencil (USB-C) on Amazon — Check current price
Disclosure: some links in this article are affiliate links or our editor's own courses and book. If you buy through them, TechyCluster or its editor may earn money at no extra cost to you. This does not influence what we cover or how we cover it. As an Amazon Associate, TechyCluster earns from qualifying purchases.
Frequently asked questions
How many security fixes are in iOS 27.2?
More than 160, according to MacRumors and TechCrunch. MacRumors counts over 30 in WebKit and roughly 15 kernel bugs, plus an Apple Intelligence flaw and a Hide My Email bug.
Should I install iOS 26.7.2 or iOS 27.2?
If you want to stay on iOS 26, install 26.7.2 now. It has many of the same fixes. If you want the full set of patches and the new features, choose iOS 27.2.
Were any of the flaws exploited in attacks?
Apple didn't say any are known to be actively exploited. One fix backported to iOS 18 carries wording that it may have been used in a sophisticated attack on specific targeted individuals, with no further details.
Does the iPhone Duo work with Apple Pencil Pro?
No. After 27.2, the iPhone Duo supports only the Apple Pencil (USB-C). Apple Pencil Pro and other models aren't supported.
Get the next one in your inbox. One email a day with the tech stories that matter, explained in plain English. Subscribe free.
Sources
This article was compiled from reporting by the following outlets. Links go to the original reports.
- MacRumors: iOS 27.2 Fixes Over 160 Security Vulnerabilities
- 9to5Mac: Apple releases iOS 27.2, here’s what’s new
- Neowin: Apple adds five new languages to Siri AI, but EU users remain left out
- PCMag: iOS 27.2 Rolls Out With Siri AI Upgrades, Apple Pencil Support for Duo, More
- TechCrunch: Apple rolls out iOS 27.2 with new Siri AI languages and security fixes
- TechRadar: iOS 27.2 launches with Siri updates, a new Apple Music icon, and more
