Apple patched 230 vulnerabilities in a single day

Apple released iOS 26.6 and macOS updates yesterday fixing 75 iPhone vulnerabilities and 155 Mac vulnerabilities. That is 230 security fixes in one release cycle. For context, Microsoft’s June 2026 Patch Tuesday fixed 49 CVEs across the entire Windows ecosystem. Google’s Q2 Android Security Bulletin covered 62 vulnerabilities. Apple just shipped more patches in one day than most vendors do in a quarter. Two explanations. Either Apple let technical debt accumulate and is catching up in bulk, or their internal security testing ramped up significantly. The article does not say which vulnerabilities were actively exploited, which makes the urgency harder to gauge. The iOS number is interesting because mobile attack surface is supposedly smaller than desktop. 75 bugs suggests either the WebKit engine had a rough quarter or the kernel networking stack did. Both have been frequent patch targets in past releases. Mac getting double the patch count makes sense given the larger codebase, but 155 is still an outlier. For comparison, macOS Ventura 13.4 last year fixed 37 issues. This is four times that volume. What this means for detection teams: if you are running EDR on managed Macs, expect a flood of update-related process spawns and file modifications. Baseline your normal patch behaviour now, or the next emergency patch will trigger every anomaly alert you own. I would check if any of those 230 CVEs overlap with MITRE ATT&CK techniques you are already monitoring. Apple does not publish detailed exploitation chains, but if a patched vuln matches your detection logic, you know someone found it useful enough to report.

---

Source: Apple fixes 75 security issues with your iPhone and 155 for Mac, update now