Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

MacRumors

macrumors bot
Original poster


Apple today released the first Background Security Improvement (BSI) update, replacing the rapid security updates that it used to seed out a few years ago. The first BSI updates address a WebKit vulnerability that could allow maliciously crafted web content to bypass Same Origin Policy. There's a macOS Tahoe 26.3.1, iOS 26.3.1, and iPadOS 26.3.1 BSI update, as well as a macOS Tahoe 26.3.2 BSI update exclusive to the MacBook Neo.

apple-lock-security-bug-vulnerability-fix-privacy.jpg

Apple says that the vulnerability was addressed with improved input validation.

Background Security Improvements were added with iOS 26, iPadOS 26, and macOS Tahoe, and Apple tested them in iOS 26.3, iPadOS 26.3, and macOS Tahoe 26.3 before today's official release.

The updates are meant to provide additional security protections between software updates for Safari, WebKit, and other system libraries. Background Security Improvements can be installed in the Privacy and Security section of the Settings app. Scroll down, and then select the Install option to install the update. If Automatically Install is toggled on, BSIs will be automatically installed when they come out.

Users who opt not to install Background Security Improvements will receive the fixes in a subsequent standard software update.

Apple warns that Background Security Updates can result in "rare instances of compatibility issues." Should that occur, the updates may be temporarily removed and enhanced in another software update.

Article Link: Apple Releases Background Security Improvement Update for macOS Tahoe 26.3.1, iOS 26.3.1, and iPadOS 26.3.1
 


Apple warns that Background Security Updates can result in "rare instances of compatibility issues." Should that occur, the updates may be temporarily removed and enhanced in another software update.
Sounds like we are being beta testers for them? 🤔
It sure sounds like more and more companies are pushing their V&V out to have their customers perform the work.
 
What is the difference between Background Security Improvements and Rapid Security Updates?

Was it just a rebranding?

Did they break Facebook again? (IIRC that was an issue the one and only time they used the Rapid Security Update feature...)
 
OK. The article says:

Background Security Improvements can be installed in the Privacy and Security section of the Settings app. Scroll down, and then select the Install option to install the update. If Automatically Install is toggled on, BSIs will be automatically installed when they come out.

In Privacy and Security auto install is on but it didn't install. I did find 26.3.1(a) there however and it wwas available to install. Kind of strange you need to go to P&S to get the update.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.