Security updates in Apple’s 26.2 updates
Last week Apple released 26.2 updates to its operating systems, and if you’re on the 26 train, you should install .2 because it includes a bunch of security updates including some zero-days.
In its list of security update details, Apple credits a bunch of security researchers for discovering the issues. Among them is Rosyna Keller of Totally Not Malicious software—fantastic name—who found bugs in MediaExperience, Messages, and Telephony. Keller says that the Messages fix alone is worth updating to iOS 26.2, or if you’re still on iOS 18, updating to iOS 18.7.3. (Though I’m hearing reports that phones that can run iOS 26 aren’t being offered iOS 18.7.3, only iOS 26.2—which is not great, since this is a security update and shouldn’t force migration to iOS 26.)
Related: Due to health and other reasons, Keller has fallen on hard times and apparently hasn’t been compensated by Apple for the security reports. There’s a GoFundMe campaign to help the long-time Mac developer.