On Monday Apple released 26.5.2 software updates for its platforms that don’t follow the company’s usual pattern, suggesting some interesting things about how it reacts to releasing security fixes.
The key is right at the top of Apple’s document about the issue:
This update delivers security fixes that were first made available in the iOS 26.6 and iPadOS 26.6 betas.
In other words, the security fixes in 26.5.2 are based on the security fixes that were rolled into the 26.6 betas, the first of which was released publicly on May 26. That means that everyone in the security world, including bad actors, has had more than a month to analyze all of Apple’s forthcoming fixes—which still haven’t rolled out to the broad user base because 26.6 is still in beta.
With 26.5.2, Apple has decided not to wait for the entirety of 26.6 to ship to get its included security fixes out into the world. Now everyone can update to 26.5.2—and Apple recommends it—and take advantage of those security fixes immediately.
