TLDR InfoSec · QUICK LINKS

APPLE PUSHES FIRST BACKGROUND SECURITY IMPROVEMENTS UPDATE TO FIX WEBKIT FLAW

links.tldrnewsletter.com2 min read

Summary from the TLDR InfoSec newsletter

Apple patched CVE-2026-20643, a Same Origin Policy bypass in WebKit's Navigation API, via its new Background Security Improvements channel across iOS, iPadOS, and macOS without requiring a full OS update.