Apple iOS 27.2.1 Fixes iMessage Flaws Exposing Group Chats
Apple's iOS 27.2.1 patches two Messages bugs that could let outsiders join group chats or read earlier messages, plus Bluetooth, AirPlay and App Intents issues.
SUMO· the number puzzle
Dialo· learn languages by speaking
ediviewer· read EDI files like documents
giftdetect· the right gift in minutesApple has released iOS 27.2.1, an update that closes several security holes on the iPhone, including two flaws in the Messages app that threatened the privacy of group conversations.
According to Apple's security bulletin, the first bug, tracked as CVE-2026-113961, is an authorization-check problem that could let a remote attacker join an iMessage group chat and receive the messages exchanged between participants. Apple fixed it by improving permission validation. The second, CVE-2026-113960, could allow a person added to a group to read messages sent before they joined. Apple resolved that one by removing the code responsible for the fault.
Bluetooth, AirPlay and App Intents
The update reaches beyond messaging. Apple disclosed a flaw in the CoreUtils component that could let a malicious Bluetooth device complete pairing without any action from the user. Another issue could allow an attacker within Bluetooth range to bypass the limits on attempts to enter a pairing code. Apple also patched a problem in App Intents that might let an app access user data, and addressed bugs in AirPlay and other parts of the operating system.
Who gets it
iOS 27.2.1 supports the iPhone 11 and newer models. Apple also published security updates for other platforms and for devices running earlier versions of iOS. Users can check for the update under Settings, then General, then Software Update.
The bulletin does not say the iMessage flaws were exploited in real-world attacks. Even so, now that the details are public, installing the fixes matters: it protects conversations and shrinks the window in which the publicly known weaknesses could be abused.
Apps worth a look
SUMO: the number puzzleTap the right tiles, add them up, hit the target. Easy to learn, hard to master. Free, for all ages.
Dialo: learn languages by speakingTalk to an AI conversation partner; every sentence comes back corrected and explained in your language. 9 languages, A1 to C2.
ediviewer: read EDI files like documentsOpen EDIFACT and X12 messages, see every segment explained, convert to JSON/XML, export PDF and Excel. Runs locally, no upload.
giftdetect: the right gift in minutesPick who it is for, the occasion and their personality. The search engine reads product descriptions from local shops and ranks what fits. Free, no sign-up.
More from this day
See all →
Google Wallet Adds Digital Home Keys for NFC and UWB Smart Locks
TSMC plans up to $1 billion investment in Anthropic and OpenAI
Acecore, Supplya and Navidyn Take Top Spots at TC Battlefield
Airwallex to invest more than $1.6 billion in Singapore over five years
More in: Security
See all →
Yasukuni Shrine Online Shop Breach Exposes 14,500 Records
GMO Aozora Net Bank Halts Banking API Twice After Attacks
Helix Replaces Captchas With a Four-Digit Voice Check
