Apple released security updates Monday that patch two bugs in iMessage group chats. One flaw allowed new members added to a group to see messages sent before they joined. Another flaw could let remote hackers join a group chat and intercept messages.
The updates address nine security flaws total. The iMessage patches appear in iOS 27.2.1, macOS 27.2.1, macOS 26.7.3, macOS 15.8.3, watchOS 27.2.1, and visionOS 27.2.1. Some updates for older Apple devices do not include the iMessage patches.
The group chat bug involving new members accessing prior messages was fixed by removing vulnerable code. The remote hacker vulnerability was addressed with improved authorization validation.
To install the updates, go to Settings > General > Software Update on iPhone, iPad, Apple Watch, and Vision Pro. On Mac, use System Settings > General > Software Update, then follow on-screen instructions.