Apple's real message is that iMessage is still better
In the quiet evolution of digital communication, Apple has released OS 26.5 across its family of devices, closing a years-long gap in the security of cross-platform messaging by bringing end-to-end encryption to RCS conversations between iPhones and Android devices. The update carries dozens of security fixes across each platform — some credited, notably, to an AI model — reflecting how the craft of finding vulnerabilities is itself changing. As with most software releases, the new features are visible, but the deeper value lies in what users will never see: the patches that quietly hold the walls of their digital lives in place.
- A long-standing security gap in cross-platform messaging finally closes: RCS chats between iPhones and Android devices running Google Messages can now be end-to-end encrypted by default.
- The encryption is not universal — it depends on both parties being fully updated, meaning many conversations will remain a patchwork of protected and unprotected threads for some time.
- Apple's Maps quietly gains a Suggested Places feature that draws on trending activity and search history, raising quiet questions about whether advertising is being laid into a space users have long trusted as neutral.
- Security patches dominate the release in scale: 52 fixes for iOS, 69 for macOS Tahoe, and dozens more across watchOS, tvOS, and visionOS — none yet exploited, but all worth closing.
- Several CVEs now credit Anthropic's Claude AI alongside human researchers, suggesting Apple's partnership with the company is reshaping how security vulnerabilities are discovered and attributed.
- Users are advised to wait a few days before updating to let stability settle, then install promptly — not for the new features, but for the fixes working silently beneath them.
Apple has released OS 26.5 across iOS, iPadOS, watchOS, macOS Tahoe, tvOS, visionOS, and HomePod Software, bringing a handful of visible changes and a substantial wave of security patches. The headline feature is end-to-end encrypted RCS messaging — a capability that addresses a gap that has persisted since the industry began shifting away from traditional SMS.
For years, iMessage offered strong encryption between Apple devices, while RCS — the modern successor to SMS — arrived without the same protection. Google had offered encrypted RCS between Android users, but any conversation crossing into iPhone territory remained unencrypted. With iOS 26.5, that changes: encryption now activates by default in supported RCS conversations, marked by a lock icon, and will gradually extend to existing chats. The caveat is that both parties must be current — many Android users haven't updated Google Messages, leaving the experience uneven depending on who is on the other end.
Elsewhere, iOS and iPadOS gain Suggested Places in Maps, a feature drawing on trending nearby activity and personal search history. It reads less like a user request and more like groundwork for future advertising in a service that has historically carried none. A new Pride Luminance wallpaper and watch face round out the cosmetic additions, while watchOS 26.5 quietly fixes two bugs affecting iMessage fallback behavior and Workout audio alerts.
The security updates are the release's real weight. iOS and iPadOS carry 52 fixes each; macOS Tahoe carries 69, with additional patches for Sequoia and Sonoma. watchOS, tvOS, and visionOS received 35, 37, and 40 fixes respectively. None are known to be actively exploited. Notably, several CVEs credit Anthropic's Claude AI alongside individual researchers — a signal that Apple's partnership with Anthropic may already be shaping how security work is done.
The practical guidance is straightforward: wait a few days to let any critical bugs surface, then install promptly. The encrypted messaging is welcome; the security patches are the reason not to wait long.
Apple has released version 26.5 across its operating systems—iOS, iPadOS, watchOS, macOS Tahoe, tvOS, visionOS, and HomePod Software—with a modest collection of new features and a substantial roster of security patches. The most significant addition is end-to-end encrypted RCS messaging on iPhones, a capability that closes a gap that has existed since the industry began moving away from traditional SMS toward Rich Communication Services.
For years, iMessage has held a security advantage over standard text messaging: Apple encrypts all messages in transit and at rest, meaning even the company itself cannot read them without the user's encryption keys. RCS promised to modernize messaging infrastructure, but it arrived without that same encryption layer. Google offered encrypted RCS between Android users through Google Messages, yet any conversation involving an iPhone user remained unencrypted. That changes now. Apple is rolling out encrypted RCS for iPhone users running iOS 26.5 on supported carriers, paired with Android users on the latest version of Google Messages. The encryption activates by default, marked by a lock icon in the conversation thread, and will gradually extend to existing RCS chats over time.
The catch is familiar: the feature requires both sides of the conversation to be current. Many Android users may not have updated Google Messages, creating a patchwork of encrypted and unencrypted conversations depending on who is on the other end. Apple's announcement of this feature included a pointed reminder that iMessage remains the superior option for privacy-conscious users communicating between Apple devices—a subtle jab at the notion that adding RCS encryption might tempt iPhone users toward green-bubble conversations.
Beyond messaging, iOS 26.5 and iPadOS 26.5 introduce Suggested Places in Maps, a feature that displays recommendations based on trending nearby activity and a user's recent search history. The addition feels like a foundation for future advertising in Maps, a service that has not historically carried ads and that no user has requested. A new Pride Luminance wallpaper and watch face round out the visible changes, offering dynamic color refraction across the spectrum.
The watchOS 26.5 update addresses two specific bugs: one where Messages could incorrectly fall back to SMS instead of iMessage on dual-SIM iPhones, and another where Workout app audio alerts could fail to play if the paired iPhone was out of range. macOS, tvOS, visionOS, and HomePod Software 26.5 contain only security and stability improvements with no new features.
The security updates are substantial. iOS and iPadOS 26.5 include 52 fixes each. macOS 26.5 Tahoe carries 69 fixes, with an additional 45 for Sequoia and 42 for Sonoma. watchOS, tvOS, and visionOS received 35, 37, and 40 fixes respectively. None of these vulnerabilities are known to be exploited in the wild, and the updates also include patches for earlier OS versions. Notably, several CVEs now credit Claude, the AI model from Anthropic, alongside individual researchers—a sign that Apple's recent partnership with Anthropic through Project Glasswing may be influencing how security work is conducted and credited.
For users deciding when to install, the security fixes are the primary reason to update promptly. Encrypted RCS messaging is welcome but not urgent; waiting a few days until the end of the week to ensure no critical bugs emerge from the update is reasonable. Once stability is confirmed, installation should be prioritized for the security patches rather than the new features.
Notable Quotes
iMessage was built with privacy in mind and has always been end-to-end encrypted. It remains the best way to communicate between Apple devices.— Apple, in announcement of encrypted RCS messaging
The Hearth Conversation Another angle on the story
Why does RCS encryption matter if most people are just using iMessage anyway?
Because not everyone uses iMessage. Android users exist, and they've been sending unencrypted messages to iPhone users for years. This closes that gap. But you're right that it's more symbolic than transformative—Apple's real message is that iMessage is still better.
The Suggested Places feature sounds like the beginning of ads in Maps. Is that what's happening?
It reads that way. Apple has resisted advertising in Maps so far, but this feature—recommendations based on what's trending and your search history—is the infrastructure for it. Whether ads come next depends on Apple's business strategy, but the groundwork is being laid.
Why does watchOS need a fix for Messages falling back to SMS on dual-SIM phones?
Dual-SIM iPhones can be tricky. The system has to know which SIM to use for which contact, and sometimes it gets confused and defaults to SMS instead of iMessage. It's a small bug, but annoying if you're expecting encrypted messages and getting unencrypted ones instead.
What's interesting about Claude being credited in the CVEs?
It suggests Apple is using AI to help find security vulnerabilities. That's new. Whether Claude actually discovered them or helped researchers find them faster, we don't know yet. But it's the first time we're seeing AI credited in Apple's security work.
Should I update immediately or wait?
Wait until the end of the week. These are solid updates, but there's always a small chance something breaks. Once you see no emergency patches appear, install them. The security fixes are worth it.