If your iPhone isn’t running iOS 27, you should download iOS 26.7.1 now to patch a zero-day flaw. Apple wrote online that this update patches a security issue on devices running iOS versions prior to iOS 27 that might have been actively exploited in an “extremely sophisticated attack.”

Zero-day exploits are newly discovered vulnerabilities with no existing protections. Updating to software versions that patch those vulnerabilities is generally the only way to guard your devices.

You can download iOS 26.7.1 now by going to Settings > General > Software Update > Update Now and following the prompts on your screen.

According to Apple’s release notes, iOS 26.7.1 patches a security issue in CoreGraphics, a framework that handles low-level, lightweight 2D renderings. Apple wrote that this issue could lead to arbitrary code execution, which could allow a third party to steal your data or hack your device for other nefarious purposes. 

“Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals,” the company wrote online. 

Apple’s description suggests this flaw was used in a targeted attack as opposed to a widespread campaign, so most people probably aren’t the intended target of this attack. However, you should still download iOS 26.7.1 to remove the possibility entirely. 

If you’re running iOS 27, you should already be protected from this issue since Apple wrote online the flaw affected iOS versions prior to iOS 27. If you are on iOS 27, I still recommend downloading iOS 27.0.1 now to give yourself the most up-to-date software.

For more on iOS, here’s what to know about iOS 27 and why you might not see iOS 27.1 on your device.

Zachary McAuliffe

Senior writer

Zach began writing for CNET in November, 2021 after writing for a broadcast news station in his hometown, Cincinnati, for five years. You can usually find him hanging out with his wife, son and dog. You can reach him at zmcauliffe@cnet.com.

See full bio