Apple patches five Bluetooth and AirPlay flaws allowing silent device pairing

Apple has issued a broad set of security updates across iOS, iPadOS, macOS, watchOS, and visionOS, addressing a total of ten vulnerabilities. Half of these flaws are critical issues within Bluetooth and AirPlay pairing mechanisms that could allow attackers to silently connect to devices without user interaction, provided they are within Bluetooth range or on the same network.

For engineers and users, this update is essential as several flaws bypass security controls, such as rate limits on pairing attempts, enabling unauthorized access. These vulnerabilities could be exploited to compromise device integrity or leak sensitive data from messaging platforms. The patches also address a known, actively exploited 'Node2Shell' vulnerability, making this a high-priority security update that users should install immediately.

What to do: Update to iOS/iPadOS 27.2.1, 26.7.3, or 18.7.12; macOS Golden Gate 27.2.1, Tahoe 26.7.3, or Sequoia 15.8.3; watchOS 27.2.1 or 26.6.1; and visionOS 27.2.1.