The rumor mill is already painting a picture of what could be one of Apple’s biggest hardware launches in years.

Apple has not revealed any of the products expected to be announced in September. Its official Apple Events page currently lists WWDC 2026 as its latest major event. Still, reporting from Bloomberg, MacRumors, respected supply-chain analysts, and other longtime Apple watchers points toward a lineup that could include the iPhone 18 Pro series, Apple’s first foldable iPhone, and updated Apple Watches.

Here’s what the most credible reporting suggests today, ranked by how likely each announcement appears.

1. iPhone 18 Pro and iPhone 18 Pro Max

Likelihood: Almost certain

This is the easiest prediction to make.

Bloomberg’s Mark Gurman has reported that Apple is expected to unveil the iPhone 18 Pro and iPhone 18 Pro Max during its traditional September launch window. According to MacRumors’ coverage of Gurman’s expected event timing, Sept. 8 or Sept. 9 are currently viewed as the most likely event dates, although Apple has not confirmed either one.

Current rumors suggest the phones will largely retain the existing Pro design while receiving several internal and camera upgrades. According to MacRumors’ iPhone 18 Pro rumor roundup, those upgrades could include Apple’s new A20 Pro chip built on a 2-nanometer manufacturing process, a more efficient display, longer battery life, and a variable-aperture main camera.

Apple’s next-generation C2 modem has also been widely rumored. However, MacRumors recently reported that leaked component information suggests Apple could use its own modem internationally while continuing to rely on Qualcomm hardware in U.S. models because of mmWave support.

The rumored 2nm A20 Pro chip is expected to improve both performance and power efficiency, although Apple has not confirmed the processor or released any performance benchmarks. Those efficiency gains could also benefit future Apple Intelligence features that run directly on the device.

2. Apple’s first foldable iPhone

Likelihood: Very likely to be announced; release timing remains uncertain

The biggest headline of the event may also be Apple’s most ambitious iPhone redesign in years.

Gurman has reported that Apple’s first foldable iPhone remains on track to debut during the company’s fall launch event. Separately, JPMorgan also expects a September unveiling, according to MacRumors’ report on the bank’s forecast.

Multiple reports describe a book-style foldable with an approximately 5.5-inch outer display and a 7.8-inch inner display that opens into a tablet-sized experience.

Apple has reportedly spent years trying to reduce the visible crease that affects many competing foldable phones. According to MacRumors’ reporting on Apple’s display technology, Samsung developed a new display panel specifically designed to minimize the crease.

Supply-chain analyst Ming-Chi Kuo has also predicted the foldable could replace Face ID with Touch ID integrated into the power button while using a dual-camera rear system instead of the three-camera array found on today’s Pro iPhones. MacRumors summarized Kuo’s expectations here.

While Bloomberg expects Apple to unveil the foldable this September, Kuo believes the commercial launch could slip into the fourth quarter. In other words, Apple may announce the phone during its keynote but delay preorders or shipments until later in the fall. Apple has not confirmed the device, its specifications, pricing or release schedule.

3. A variable-aperture camera

Likelihood: Likely

Rather than dramatically redesigning the iPhone 18 Pro, Apple may focus on photography.

The main 48-megapixel camera on both Pro models could receive a variable aperture, according to MacRumors’ roundup of the top rumored iPhone 18 Pro features.

Unlike the fixed aperture used by current iPhones, a variable aperture allows the lens to control how much light reaches the sensor. That could improve low-light photography while also giving photographers more control over depth of field.

Android manufacturers have offered similar technology for several years, but it would represent a first for Apple’s smartphone lineup.

4. A smaller Dynamic Island

Likelihood: Possible, but disputed

The Dynamic Island remains one of the least settled iPhone 18 rumors.

Several analysts and leakers believe Apple could move portions of the Face ID system underneath the display, resulting in a narrower Dynamic Island. According to MacRumors’ roundup of iPhone 18 Pro rumors, multiple supply-chain reports support that possibility.

However, not everyone agrees.

Later CAD renders suggested a smaller cutout, but MacRumors noted that the source behind those renders does not yet have a lengthy Apple track record. Other leakers have suggested the change could be postponed until the iPhone 19.

At this point, a completely uninterrupted display appears unlikely this year. Whether the Dynamic Island becomes noticeably smaller remains one of the biggest unanswered questions heading into Apple’s event.

Must-read Apple coverage

5. Apple Watch Series 12

Likelihood: Almost certain

Unlike the iPhone, Apple’s flagship smartwatch isn’t expected to receive a dramatic redesign.

According to MacRumors’ summary of Mark Gurman’s reporting, the Apple Watch Series 12 will likely focus on faster performance and continued improvements to health and fitness tracking.

Some rumors have also pointed toward improved battery life, although those reports aren’t as consistently supported as the processor upgrade.

Earlier leaks suggested Apple could add Touch ID to the Apple Watch. However, more recent reporting makes that seem increasingly unlikely, and Gurman does not expect a significant redesign this year.

For most buyers, faster performance and better health features would likely matter more than another cosmetic update.

6. Apple Watch Ultra 4

Likelihood: Likely

Apple is also expected to refresh its premium outdoor-focused smartwatch.

Current reporting suggests the Ultra 4 will receive many of the same improvements expected for the Series 12, including a newer processor and refinements to health and fitness features.

According to MacRumors’ Apple Watch preview, Gurman does not expect a major redesign for either watch this year.

That would make the Ultra 4 more of an evolutionary update than a dramatic leap over the current generation.

7. No standard iPhone 18

Likelihood: Very likely

One of the event’s biggest surprises may involve a phone Apple reportedly won’t announce.

Multiple reports suggest Apple plans to launch the iPhone 18 Pro, Pro Max and foldable iPhone this fall while delaying the standard iPhone 18, iPhone 18e and possibly the next iPhone Air until spring 2027.

According to MacRumors’ overview of Apple’s rumored iPhone 18 release strategy, the split launch would represent one of the biggest changes to Apple’s release calendar in years.

If accurate, buyers interested in Apple’s entry-level flagship may have to wait several additional months, while those shopping this fall would choose from Apple’s premium lineup instead.

What probably won’t appear

Earlier rumors suggested Apple could introduce AirPods equipped with infrared cameras this year. However, that now appears unlikely.

According to MacRumors’ summary of Bloomberg’s latest reporting, the camera-equipped AirPods are now expected to arrive in late 2027 alongside Apple’s 20th-anniversary iPhone.

New Macs, iPads and smart home products are also widely expected to receive separate announcements later in the year rather than sharing the spotlight with Apple’s flagship iPhone launch.

Until Apple officially sends invitations, every product, feature and timeline discussed here should be treated as a rumor rather than a confirmation. Even so, the reports are beginning to converge. For anyone considering a new iPhone or Apple Watch, waiting a few more weeks could provide a much clearer picture of Apple’s next generation of hardware and whether it’s worth upgrading.

How we ranked the rumors

We ranked each rumor based on the strength and consistency of the reporting behind it. Claims supported by multiple reputable sources, including Bloomberg, established Apple analysts and supply-chain reporting, received higher likelihood ratings. Rumors based on a single leak, disputed information, or unclear launch timing were rated more cautiously.

The rankings are not guarantees. Apple has not confirmed any of these products or features, and its plans could change before the event. The goal is to help readers distinguish the most credible expectations from the more speculative possibilities before deciding whether to upgrade or wait.

Related reading: If you’re also considering a new Mac, check out our guide to the rumored second-generation MacBook Neo and what its reported upgrades could mean for buyers.

Polar is betting that the next workplace browser will do more than display web apps: It will act inside them. On July 29, 2026, the company detailed its AI browser and announced a $5.7 million seed round led by Madrona after replacing its earlier Composer agent with Polar in May.

The macOS-only, Chromium-based browser uses AI agents to complete multistep tasks inside websites where a user is already signed in. The approach could reduce manual handoffs and the need to build a separate integration for every service, but it also gives IT teams new questions about permissions, data handling and oversight.

CEO Kevin Jiang previously worked on Perplexity’s Comet browser. He told TechCrunch that Polar targets recurring knowledge-work tasks rather than occasional consumer activities such as booking travel. The product arrives as AI agent permissions expose gaps in security systems designed primarily around human users.

Polar automates work across logged-in accounts

Polar can click, type and navigate websites through existing browser sessions. It can schedule jobs and use the current page or selected tabs as context, allowing work to continue across several sites without dedicated connectors.

In its July 29 announcement, Polar said users initiated more than 4.5 million web actions during seven months of testing. Some tasks reportedly ran for more than 15 hours. Those figures have not been independently verified.

Polar says users can observe an agent, take control at any time and keep sensitive decisions in human hands. It also says guardrails are designed to prevent agents from independently completing high-risk actions. Detailed documentation of those controls remains limited, and SOC 2 compliance is still in progress.

Polar’s privacy policy says browser history, bookmarks, cookies, local storage and imported passwords generally remain on the device. Agent tasks may still send prompts, screenshots, page context, files, tool results and conversation history to Polar’s systems and model providers. The company says its commercial provider agreements prohibit training on customer data and provide zero data retention, subject to limited exceptions.

Controls to test before wider deployment

Browser agents can encounter hostile instructions hidden in webpages, emails or documents. Researchers demonstrated the risk when BioShocking attacks tricked AI browsers into exposing sensitive data by presenting malicious prompts as game instructions.

OWASP classifies the technique as indirect prompt injection. It can divert an agent from its assigned task, expose data or trigger unauthorized actions.

Approval controls also require testing. A Claude for Chrome flaw allowed a rogue extension to trigger tasks involving Gmail, Google Docs and Google Calendar under certain conditions. The risk increased when unattended operation was enabled.

Before connecting Polar to production accounts, teams should verify:

• Identity and offboarding: Enforce multifactor authentication, least-privilege access, rapid revocation and complete removal of sessions and workflows.
• Approval gates: Define which messages, uploads, purchases, deletions or domain visits require confirmation.
• Data handling: Document what leaves the device, where it is processed and how long it is retained.
• Audit and emergency controls: Confirm that logs record actions and approvals and that administrators can stop running or scheduled tasks.
• Injection defenses: Test hostile instructions embedded in webpages, messages, documents and application records.

Organizations can begin with synthetic data, nonproduction identities and narrowly limited permissions, then expand access as testing confirms the controls and Polar provides sufficient documentation on sessions, approvals, logs, retention and administration.

Read more: 1Password’s credential-protected approach shows how temporary approval and restricted credential access can reduce the risks of allowing AI agents to operate inside authenticated accounts.

The browser security race is speeding up, and Chrome’s update calendar may be next to change.

Google is testing a new schedule that would deliver Chrome security updates twice a week as the company responds to a surge in vulnerabilities discovered through AI-powered security tools.

The move comes after Chrome 149 and Chrome 150 fixed 1,072 security bugs combined, a figure that surpassed the number of security issues patched across the previous 23 Chrome milestones, according to Google.

Google said its security teams have been using large language models to improve vulnerability discovery, bug triage and patch development. The company’s goal is to shorten the time between finding a flaw and protecting users from potential attacks.

“In the face of fast-moving, AI-powered attacks, our delivery cadence must accelerate even further. To meet this moment, we are piloting a shift to two security releases per week,” Google said in its security update report.

Google’s increased release pace is tied to improvements in AI-based vulnerability research. The company said its internal tools can now analyze Chrome’s massive codebase, identify weaknesses and help developers create fixes more quickly.

One vulnerability discovered through this process had remained hidden in Chrome’s code for more than 13 years. The sandbox escape flaw could have allowed a compromised browser process to access local files on a user’s machine.

Google said AI tools are not replacing traditional security methods but adding another layer alongside techniques such as fuzzing and external vulnerability research programs. The company is also seeing more security reports from researchers. Google said it received more external bug reports in March 2026 than it received throughout all of 2025, increasing pressure to process and fix vulnerabilities faster.

Google wants Chrome updates to become less annoying

The biggest challenge with faster security releases is not only creating patches but getting them installed.

Chrome already downloads and prepares updates in the background, but users typically need to restart the browser before security fixes take effect. Google said this delay creates a “patch gap” where attackers may have time to study vulnerabilities after fixes become public.

To address this, Google is exploring dynamic patching, a system designed to replace updated browser components without requiring a full restart.

The company has also introduced a “zero window auto-restart” feature in Chrome 150 on macOS. It allows Chrome to automatically restart and apply updates when the browser has no open windows but is still running in the background. Google has not announced when dynamic patching will become available to all Chrome users.

More Google coverage

What faster Chrome releases mean for businesses

The change will likely happen quietly for consumers. Chrome already updates automatically for most users, and Google is working to reduce the need for manual restarts.

Businesses, however, may face new challenges. Organizations that manage large Chrome deployments will need to balance faster security protection with the need to test browser updates before widespread rollout.

A twice-weekly security cycle could require IT teams to rethink update policies, especially in industries where browser compatibility is critical for daily operations. Google recommends enterprise customers use Chrome management tools, update policies, and monitoring systems to keep devices protected.

The bigger security shift

Google’s move shows how AI is changing the balance of software security. In the past, discovering vulnerabilities was often the biggest hurdle. Now, companies increasingly need to deliver fixes before attackers can take advantage of newly discovered flaws.

Google is also investing in longer-term protections, including reducing reliance on vulnerable code patterns and expanding the use of memory-safe programming languages such as Rust.

The twice-weekly Chrome security release schedule is still only a pilot, and Google has not said whether it will become permanent. But the experiment highlights a new reality for software makers: as AI accelerates vulnerability discovery, rapid patch delivery may become just as important as finding the bugs themselves.

Also read: Google plans to expand its Age Signals API worldwide, giving Android apps access to age ranges instead of exact birth dates while requiring families to opt in.