Update Your iPhone, iPad, Mac and Apple Watch Again: What iOS 27.2.1 Fixes, and Which Older Devices Get Updates Too

Apple released a fresh batch of software updates yesterday, Monday 9 November, for the iPhone, iPad, Mac, Apple Watch and Vision Pro, and they close several security holes, including one that could have let a stranger slip into an iMessage group chat and another that could let a Bluetooth gadget pair with your device without you agreeing to it. There are updates for older iPhones and Macs too, so almost everyone reading this will have something waiting for them, and Apple recommends installing it.

What Apple has released

The new versions are iOS 27.2.1 for iPhone, iPadOS 27.2.1 for iPad, macOS Golden Gate 27.2.1 for the Mac, watchOS 27.2.1 for Apple Watch and visionOS 27.2.1 for Vision Pro. They arrive two weeks after the 27.2 updates, and Apple's release notes describe them as bug fixes and security updates rather than anything with new features.

If your device isn't on the latest software, perhaps because it's an older model that can't run it, or because you've chosen to stay where you are, Apple hasn't forgotten you. MacRumors reports that iOS 26.7.3 and iOS 18.7.12 are available for iPhones not running iOS 27, and on the Mac there's macOS Tahoe 26.7.3 for Macs on macOS 26 and macOS Sequoia 15.8.3 for Macs on macOS 15.

What the security fixes cover

Apple publishes the details of each fix on its security releases page, and MacRumors and 9to5Mac have both been through the list. The main ones are:

• iMessage group chats. One flaw could have let someone, from anywhere, join a group chat uninvited and read its messages. A second could let a newcomer to a group see messages that were sent before they joined.
• Bluetooth. A malicious Bluetooth device could have paired with yours without you doing anything, and another bug could let someone nearby interfere with your device's memory, which is the kind of opening attackers use to make software misbehave.
• AirPlay. AirPlay is what you use to send video or music from your iPhone to a TV or speaker, and it sometimes asks for a short pairing code. Normally your device only allows a limited number of guesses, but several bugs could let someone within Bluetooth range get around that limit and keep trying.

Apple found four of these problems itself. It hasn't said that any of them have been used in real attacks, but now that the details are public, MacRumors points out that devices which haven't been updated could be more at risk, because anyone looking to misuse these flaws now knows where they are.

The eMudhra certificate problem on the Mac

You may remember the recent story about eMudhra, a company that issues the digital certificates websites use to prove they're genuine, a bit like a passport for a website. An investigation by Mozilla, the organisation behind the Firefox browser, found that some of eMudhra's certificates were built on secret keys so weak that they were easy to work out, which meant an attacker could create fake certificates that looked valid for any website at all.

Apple blocked those certificates on 19 October in Safari, Mail and apps that use Apple's own building blocks, so most people were already protected. The gap that remained was in command-line tools, which are the text-based programs that developers and more technical users type into the Terminal app, such as curl and git. According to MacRumors, macOS Golden Gate 27.2.1 stops those tools accepting the bad certificates too, and Apple has released macOS Tahoe 26.7.3 and Sequoia 15.8.3 for Macs on the older versions. The fix is also in the macOS 27.3 beta, but including it now means nobody has to wait for that update, which MacRumors expects in December.

If you never open Terminal, this part won't have affected you day to day. For anyone who can't update their Mac, Apple still has instructions available for removing the affected certificates by hand.

What it means for you

Apple recommends updating, so here's where to find it on each device. It's worth plugging in and being on Wi-Fi before you start, and giving it a few minutes.

• iPhone and iPad: open Settings, tap General, then Software Update.
• Mac: open System Settings, go to General, then Software Update.
• Apple Watch and Vision Pro: open the Settings app on the device itself and look for Software Update.

If your iPhone or Mac is on an older version, the same Software Update screen should offer you iOS 26.7.3, iOS 18.7.12, macOS Tahoe 26.7.3 or macOS Sequoia 15.8.3, whichever suits your device, so you get the security fixes without having to move to the newest software if you'd rather not.

If the update isn't showing, or you're not sure which version your device is on, you can ask iHelp AI at /chat for a quick answer, and if you'd like us to go through it with you, remotely or in person here in Dorset, you can book a session whenever suits you.

Alex