Update your iPhone: iOS 27.2.1 shuts a hole that could let strangers into your iMessage groups
Apple released iOS 27.2.1 on 9 November with nine security fixes. Two are in Messages: a remote attacker could join an iMessage group chat and receive its messages, and someone added to a group could see what was sent before they joined. Five more involve Bluetooth and AirPlay pairing. It covers iPhone 11 and later.
If your iPhone has been nagging you about an update this week, say yes. Apple shipped iOS 27.2.1 on Monday 9 November, and Apple’s own security note lists nine fixed flaws. The one anybody will understand lives in Messages.
A remote attacker could get into an iMessage group chat and receive the messages sent inside it. No invitation needed.
What does iOS 27.2.1 fix in Messages?
Two things, both in group chats. The first is the one above: an authorisation bug that let an outsider join a group. The second is quieter. Someone added to a group could reach messages sent before they arrived, the ones they were never meant to see. Apple fixed that one in the bluntest way available. It removed the vulnerable code.
Think of the family group, the work group, the school-parents group. Nobody needs this explained twice.
What about Bluetooth?
Five of the nine fixes deal with pairing devices. In several, someone within Bluetooth range (or on the same network, in AirPlay’s case) could get around the limit on pairing-code attempts, and in one case pair a device with yours without you touching anything. Another allowed memory corruption over Bluetooth.
That leaves two: an app that could reach sensitive data through App Intents, and a bug in the brotli compression library where specially crafted data could corrupt memory.
Apple does not say any of these were exploited in the wild. When that happens, its notes usually say so, and this one does not.
Which iPhones get iOS 27.2.1, and how do you install it?
iOS 27.2.1 covers iPhone 11 and every later model, with iPadOS 27.2.1 for supported iPads. If you can’t, or didn’t want to, move to iOS 27, there is iOS 26.7.3 and, for older devices, iOS 18.7.12, according to Apple’s security releases list. Mac, Apple Watch and Vision Pro got 27.2.1 versions the same day.
To install it on an iPhone: Settings, General, Software Update. It takes a few minutes and a restart.
If you are waiting on something bigger from this software cycle, the Siri AI that now speaks Portuguese but stays blocked in the EU has not changed with this release. This one is purely about patching holes.
By Oliver Grant
Image: Apple (Newsroom)