iPhone owners have a new security update to install: iOS 27.2.1 went out on 9 November, a fortnight after iOS 27.2. Two of the flaws it closes let outsiders reach things they should not be able to, which is reason enough not to leave it waiting.
Group chats in iMessage were the target of one bug: someone far away could add themselves to a conversation without being invited, and that hole is now shut. The AirPlay fix concerns someone nearby over Bluetooth, who might have been able to keep guessing pairing codes past the cap on attempts. Fixes in other components, Bluetooth among them, are shared across Apple’s platforms. Reports on Apple’s security notes do not say whether any of these issues was used in real attacks.
The update is the follow-up to iOS 27.2, which patched 329 flaws at the end of October. This one is far smaller.
Apple shipped companion releases the same day. They are watchOS 27.2.1, macOS Golden Gate 27.2.1 and, for phones that stayed on older software, iOS 26.7.3 plus iOS 18.7.12. On the Mac, the update also fixes a certificate flaw from the eMudhra authority in command-line tools, and Apple tells users to update; Macs on macOS 26 or macOS 15 get it through Tahoe 26.7.3 and Sequoia 15.8.3.
To install it, open Settings, then General, then Software Update on your iPhone. Some early users say the download is around 1.5 GB, though Apple has not given a figure that we could confirm, and one commenter reported wired CarPlay trouble after updating that they later said had cleared up.
