Apple releases first Background Security Improvement update for iPhones, iPads, and Macs

Apple has released its first public Background Security Improvement—a lightweight patch fixing a WebKit flaw that could let a malicious website quietly pull data from another site open in the same Safari session.The fix lands as iOS 26.3.1 (a), iPadOS 26.3.1 (a), and macOS 26.3.1 (a). MacBook Neo owners get a separate macOS 26.3.2 (a), since the new machine ships on a slightly newer build of macOS Tahoe 26.

Apple's new way of pushing security fixes without a full software update

Background Security Improvements are designed to sit between regular update cycles—targeting specific components like Safari, WebKit, and system libraries rather than requiring a full OS update. Installation only needs a quick restart, not the longer reboot that comes with standard software updates.

The feature first arrived with iOS 26.1 and replaces the old Rapid Security Response system from iOS 16, which Apple rarely used and eventually retired after a 2023 update broke website rendering on some devices.Before yesterday's public release, Apple had been quietly testing the system with developers and beta users across iOS 26.3 and macOS Tahoe 26.3.To install it manually, go to Settings → Privacy & Security → Background Security Improvements on iPhone or iPad, or the same path in System Settings on Mac. If automatic installation is already on, there's nothing to do—it installs on its own.Apple does flag that these updates can occasionally cause compatibility issues, in which case a patch may be pulled and folded into a future software update instead.