Apple Fixes iMessage Flaws That Let Attackers Crash Group Chats

Apple has released security updates patching two concerning vulnerabilities in iMessage group chats. One flaw (CVE-2026-113961) could allow a remote attacker to join a group chat and receive all its messages, while a separate flaw (CVE-2026-113960) could let a newly added member access messages that were sent before they were part of the conversation. The updates also fix a known vulnerability (CVE-2026-111497) in Google's Brotli compression library and several Bluetooth/AirPlay flaws that could enable unauthorized pairing.

These patches affect multiple operating systems including iOS, iPadOS, and watchOS. The core impact is that iMessage users, who rely on the service for private conversations, now have serious flaws that undermine that privacy by potentially allowing unauthorized access. The Bluetooth vulnerabilities compound the risk, as they could let nearby attackers pair with devices. The main takeaway is that Apple users should immediately install the latest updates to protect their communications and device security from these high-risk vulnerabilities.