The vulnpocalypse rains iBugs down on Apple with record-setting number of patches

16 Sept 2026 07:38 AEST 1 min read Rewritten in plain language

Show what we removed Rules applied: A1×2 A3×3 A9 C2×2 D2×3 D3×12 D4 E3×5 F2×3 all 30 rules

Overview

Apple has addressed more than 260 CVEs across all of its operating systems, browsers, and other software products, marking the largest single patch cycle in Cupertino's history.
Apple’s latest mobile and operating system versions, iOS 27 and macOS 27 Golden Gate, released on Monday, also address a record 122 and 204 security vulnerabilities, respectively, across phone, iPad, and computer operating systems.
Apple credited AI-bug-finding firm Calif, along with Claude and Anthropic Research, with finding and reporting this security flaw.
Apple credited Nosebeard Labs’ Andreas Jaegersberger and Ro Achterberg with reporting this bug.
CVE-2026-43719 is another SMB use-after-free bug, discovered by Calif’s Dang and Jakob Pammer, Claude, and Anthropic.

5 sentences from our version of the report, chosen to cover it. Nothing here is written; every line is in the article below. How

Summarized version

Apple’s latest mobile and operating system versions, iOS 27 and macOS 27 Golden Gate, released on Monday, also address a record 122 and 204 security vulnerabilities, respectively, across phone, iPad.

The report’s most important sentence, shortened and in plain words. How

Headline check

The one thing this headline claims is in the report.

Figures, names and quoted words in the headline, looked for in the report itself — not in the summary above. One claim in this headline could be checked, so this is a narrow pass and not a thorough one. How this is checked

The article, shortened and in plain language

Apple has addressed more than 260 CVEs across all of its operating systems, browsers, and other software products, marking the largest single patch cycle in Cupertino's history.

While this CVE count is notable compared to some vendors - hello, Microsoft’s record 974 bugs disclosed earlier this month - it does set a company record for Apple.

The silver lining for everyone updating their Apple products right now: none of the vulnerabilities are listed as being under active exploitation.

Just two of the iPhone and iPad CVEs fixed with iOS 27 credit a coding agent or AI assistant with finding them. Apple credited AI-bug-finding firm Calif, along with Claude and Anthropic Research, with finding and reporting this security flaw.

Then there's CVE-2026-65409, a type-confusion issue in iOS’ Foundation framework that can be abused to cause a denial of service, also found by Calif - specifically human researcher Bruce Dang - in collaboration with Claude and Anthropic Research.

Apple credited Nosebeard Labs’ Andreas Jaegersberger and Ro Achterberg with reporting this bug.

The new macOS 27 update that addresses 204 vulns also fixes both the AI hunted bugs: CVE-2026-65410 and CVE-2026-65409.

Grattafiori, the Nvidia AI Red Team, Meridian Miftari, and Amy from amys.website said this flaw to Apple.

CVE-2026-43719 is another SMB use-after-free bug, discovered by Calif’s Dang and Jakob Pammer, Claude, and Anthropic.

Shortened to 1 minute of reading, this version reads 11.5 on the Niral Score.

You are reading our version, not theirs. This is The Register's report shortened to its most important sentences, in plainer words, with verdicts and loaded words taken out. Plain description stays, and so do adjectives that carry a fact, such as "former" or "federal". The reporting, the facts and the quotations are theirs — quotations are never edited — and the indicators beside it measure this version. Hover or tap Adjectives to see every one left in the text.

Indicators

Niral Score 12.6was 15.9 mundaneloaded

Highlighted in the text. Words that carry a fact and quoted words are not counted.

flaw8finding6issue6bug5credit5bugs4credited4ios4security4system4user4abused3app3background3cause3code3found3grattafiori3ipad3lead3operating3record3systems3termination3validation3vulnerabilities3access2across2another2count2disclosed2execution2exploit2exploited2files2fixed2framework2gain2however2include2including2iphone2listed2macos2models2network2patches2products2protocol2read2receive2remote2reporting2researcher2software2update2yet2ギカク2

Sentiment -0.3 hostilefavourable Sourcing 22 unattributednamed sources Mood 44.5 sorrowjoyful

5 read zero: political diction, generational, gender, jingoistic, religious

Political diction 0 left-codedright-coded Generational 0 harder on the oldharder on the young Gender 0 no gendered framingframing throughout Jingoistic 0 reports to a readerwrites from a camp Religious 0 not invokedovert

Measurements of how this article is written, not of whether it is correct. How each one is measured.

Measured on our version above. Struck through: the same measure of The Register’s report as filed. The outlet comparison and the extension show the same pair.

See every word we changed

How this outlet filed it, and how we rewrote it

No other newsroom we read has filed on this event, so there is nothing to compare it with yet.

Outlet	Niral Score	Adjectives	Sourcing	Sentiment	Happiness
The Registeras they published this story	15.9	25	22	-0.3	44.5
Mundane Readneutralized from The Register	12.6	22	22	-0.3	44.5

How did this read?

Readers

Comments

Nothing here yet.

Questions

Readers can ask a question about this story here. Questions and answers are for subscribers. Sign in to read them.

Comments are read before they appear where anything in them needs a person to look. Nothing posted here is ever deleted; a comment taken down keeps its text and the reason, so the decision can be looked at again. How this works

Report a problem with these scores or this rewrite — it goes straight into the public ledger.