July 2 update: this post, first released on June 29, was updated to reflect Apple’s confirmation that this update was issued unexpectedly early as a response to hackers’ use of AI.
Apple’s latest iPhone software has just been released, almost a month after iOS 26.5.1, which was exclusively for iPhone 17 series handsets and iPhone Air. It has a focus on security, not new features. That’s not surprising, given we’re at the end of the iOS 26 cycle. Here’s what the update is all about, how to get it, and why its early release is unprecedented.
The first thing to note is that the security updates here were not originally planned to be happen now, but would be released when iOS 26.6 goes on general release in the coming weeks, but, in a rare move, Apple has confirmed that it has come early in a response to AI-driven security concerns. More on that below.
Which iPhones Can Run iOS 26.5.2?
This update is for all iPhones which can run iOS 26, specifically, all models from the iPhone 11 onwards. It means that unless you have one of the iPhone 17 or iPhone Air models, you’ll be coming to it from iOS 26.5, not iOS 26.5.1.
How To Download And Install iOS 26.5.2
The process is familiar by now, I’m sure: open the Settings app and choose General, followed by Software Update. Here you’ll find Download and Install, and it’ll be downloaded promptly. It’s a small update, around 700MB on my iPhone 17 Pro Max, which meant it downloaded and installed in less than 10 minutes.
iOS 26.5.2 — What’s In The Release
Apple’s release notes specify that the content is all security-related. Intriguingly, the company’s support document detailing the security content reveals that the security fixes have already been made available to beta users in the form of the iOS 26.6 betas.
Apple iOS 26.6 was expected to land in the next week or two, so this early release is an indication that Apple regards the fixes urgent enough to appear now instead.
Apple confirmed this to Reuters, which reported the company “said it is pushing forward a series of software updates that would previously have been bundled with a new version of its iOS operating system, making them available earlier than in previous cycles in response to AI-driven security concerns.”
This is a notable change, as the report said, with Apple realizing that AI’s capability to speed up “malicious hacking tools,” it needed to reduce the time before updates were available.
All of which leaves users with the question, why wasn’t this done as a Background Security Improvements release? These, after all, were designed specifically for urgent updates that were only about security. Perhaps it’s because this particular set of changes had already been completed as part of iOS 26.6 and made available to beta users.
In which case, it may be that more BSI releases will happen in the future, rather than full-scale updates such as this one. That would make sense for a number of reasons. First, in the event that the user doesn’t like what it does to their iPhone, they can be rolled back.
Second, because they’re just about security fixes, though they are found in a different part of Settings, they can be installed fast. Which is what you want with security fixes generally and, it sounds like. Apple is especially keen to make happen.
The biggest part of the release is more than a dozen elements relating to WebKit, the web browser engine. That’s around half of the total fixes in the update. There are also three fixes for the Kernel, the engine that underpins the operating system.
The vulnerabilities address issues such as apps causing system termination, malicious web content leading to crashes or other issues such as memory corruption or hijacking of clipboard data.
“None of the vulnerabilities are known to have been actively exploited, but now that Apple has published details about them, it is possible malicious entities could create exploits targeting users who have not yet updated,” MacRumors reported.
