Anthropic research scientists Milad Nasr and Nicholas Carlini used Claude, their employer's AI model, to find a security hole in Safari, which Apple closed on Monday with iOS 26.6 and iPadOS 26.6. The update fixes 87 vulnerabilities across 78 entries, covering the kernel, Safari, image processing, and Contacts. Apple does not flag any as already exploited. Apple credits CVE-2026-64757 to "Milad Nasr and Nicholas Carlini with Claude, Anthropic". The bug was a memory corruption issue in WebKit that let specially crafted web content crash Safari; the same names appear under WebKit Storage. Apple names Claude in its acknowledgments, which normally list people and companies, not tools. How large Claude's share was is not stated. The update also optimizes the Spotlight index in preparation for iOS 27; Apple notes background tasks "might affect battery life and thermal performance". iOS 26.6 runs on iPhone 11 and newer, including iPhone 17 and iPhone 17 Pro Max. iPadOS 26.6 covers iPad Pro 12.9-inch from 3rd generation, iPad Pro 11-inch from 1st generation, iPad Air from 3rd generation, iPad from 8th generation, and iPad mini from 5th generation. Apple also released macOS Tahoe 26.6, watchOS 26.6, tvOS 26.6, visionOS 26.