"Apple’s iOS 26.2 quietly turns on automatic updates for some users while urgently fixing over 20 serious security flaws, including two WebKit zero-days already used in attacks."
Apple’s iOS 26.2 might look like a routine point update, but it carries two big stories that matter to every iPhone user. First, it quietly enables automatic software installation for some people during setup. Second, it patches more than 20 serious security vulnerabilities, including two WebKit zero-day bugs that were already being exploited in targeted attacks.
This combination explains why Apple is pushing iOS 26.2 so aggressively. In this blog, we break down what changed, why it matters, and what you should check on your own iPhone right now.
What is the main change in iOS 26.2?
After installing iOS 26.2, some users see an extra screen during setup called Software Update Complete. Tapping Continue does more than finish setup. It can also turn on automatic download and installation of future iOS updates.
There is a smaller option called Only Download Automatically, but it is easy to miss. This means users who previously disabled automatic updates may suddenly find them enabled again without realizing it.
In short: iOS 26.2 can reset or change your update preferences during setup, especially if you move quickly through the screens.
Why is Apple pushing this update so hard?
The real urgency comes from security. Apple confirmed that iOS 26.2 fixes more than 20 vulnerabilities across key system components such as WebKit, the kernel, Photos, and the App Store.
Two of the most serious bugs were in WebKit, the browser engine used by Safari and many in-app browsers. These flaws allowed malicious websites to execute code or corrupt memory. Security researchers confirmed that these bugs were already used in targeted, sophisticated attacks against users running older versions of iOS.
Why WebKit bugs are especially dangerous
- Safari and many apps rely on WebKit.
- Simply opening a malicious link can trigger an exploit.
- Once Apple releases a patch, attackers can study it and build new attacks.
This is why security experts describe iOS 26.2 as an update now situation rather than something you can delay.
Other critical fixes included in iOS 26.2
Beyond WebKit, iOS 26.2 closes several worrying security holes:
- An App Store issue that could expose payment tokens.
- A Photos bug that could reveal images from the Hidden album without authentication.
- A problem that allowed passwords to be removed during remote FaceTime control.
Together, these fixes explain why Apple appears more aggressive about encouraging automatic updates in this release.
How to check or disable automatic updates
If you already installed iOS 26.2, you should check your update settings manually:
- Open Settings.
- Go to General then Software Update.
- Tap Automatic Updates.
| Setting | What it does |
|---|---|
| Download iOS Updates | Downloads updates in the background but waits for approval |
| Install iOS Updates | Installs updates automatically overnight |
If you want maximum control, you can turn off Install iOS Updates while keeping downloads enabled. Some advanced users also recommend leaving only Security Responses and System Files turned on.
What else is new in iOS 26.2?
While security is the headline, iOS 26.2 also brings several user-facing improvements that are worth mentioning:
- Lock Screen: More controls for the Liquid Glass clock style, including visual refinements.
- Apps: Alarm-style alerts in Reminders, tables in Freeform, better Podcasts chapters, and Apple News UI polish.
- Safety: Improved emergency alert options and better mapping for critical warnings in supported regions.
The update supports iPhone 11 and newer models, including recent iPhone SE versions, making it relevant for most active iPhone users.
Should you install iOS 26.2 right now?
For most users, the answer is yes. The confirmed zero-day exploits make this update hard to ignore. If you are concerned about automatic updates, install iOS 26.2 first, then review your settings afterward.
Delaying security updates today is riskier than ever, especially when web-based attacks can happen silently in the background.
FAQs
Does iOS 26.2 force automatic updates for everyone?
No. It appears mainly during setup for some users, but the prompt can easily be missed.
Can I turn automatic updates off again?
Yes. You can disable automatic installation from Settings at any time.
Is iOS 26.2 only about security?
No. It also includes small UI refinements, app improvements, and safety features.
