Apple Patches (almost) everything again. March 2026 edition., (Wed, Mar 25th)
Source SANS ISC Handlers Diary
Mentioned vulnerabilities
Rated by Threat Radar
Data as of 30 Mar 2026, 20:52 UTC
What to do
AI-suggested
Organizations should immediately prioritize deploying the March 2026 Apple security updates across all supported devices and operating system versions, including macOS (Tahoe, Sequoia, Sonoma), iOS, iPadOS, tvOS, watchOS, and visionOS. Given the range of vulnerabilities affecting core system components and frameworks, patching is the most effective mitigation. For devices that cannot be updated immediately, implement compensating controls such as restricting access to untrusted networks, disabling unnecessary services, and enforcing strict application whitelisting and sandboxing policies. Employ network-level protections to monitor and block suspicious traffic, especially targeting WebKit-based exploits and SMB shares. Enforce strong physical security controls to prevent unauthorized access to devices, mitigating risks from physical attack vectors like Activation Lock bypass and biometric app access. Review and tighten permissions for apps, particularly those with access to sensitive data or system resources. Conduct thorough endpoint detection and response (EDR) monitoring to identify anomalous behaviors indicative of exploitation attempts. Educate users about phishing and malicious web content risks, as several vulnerabilities involve crafted web content. Finally, maintain an inventory of Apple devices and OS versions to ensure comprehensive patch coverage and compliance.
Description
Apple released the next version of its operating system, patching 85 different vulnerabilities across all of them. None of the vulnerabilities are currently being exploited. The last three macOS "generations" are covered, as are the last two versions of iOS/iPadOS. For tvOS, watchOS, and visionOS, only the current version received patches. This update also includes the recently released Background Security Improvements. Some older watchOS versions received updates, but these updates do not address any security issues.