Apple says the bug was used to attack "specific targeted individuals" running iOS 26, which the majority of Apple customers are still using.